CompTIA Security+ (SY0-501) — Question 449

Which of the following is the appropriate network structure used to protect servers and services that must be provided to external clients without completely eliminating access for internal users?

Answer options

• A. NAC
• B. VLAN
• C. DMZ
• D. Subnet

Correct answer: C

Explanation

The correct answer is C, DMZ, as it is specifically designed to host externally accessible services while providing an additional layer of security. NAC, VLAN, and Subnet are important for network management and segmentation, but they do not specifically create a safe zone for external access like a DMZ does.