Certified Cloud Security Professional (CCSP) — Question 223

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

Answer options

• A. Proxy
• B. Bastion
• C. Honeypot
• D. WAF

Correct answer: B

Explanation

The correct answer is B, Bastion, as it is specifically designed to be a secure gateway for authorized access to resources while being exposed to the Internet. Options A (Proxy) and D (WAF) serve different purposes related to traffic management and security, while C (Honeypot) is designed to attract and trap potential attackers rather than serve a legitimate function.