Certified Cloud Security Professional (CCSP) — Question 367

When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?

Answer options

• A. Firewall
• B. Proxy
• C. Honeypot
• D. Bastion

Correct answer: D

Explanation

A Bastion host is specifically designed to be exposed to the Internet while providing secure access and performing limited, defined operations. In contrast, a Firewall is used to control traffic, a Proxy acts as an intermediary, and a Honeypot is designed to attract attackers, none of which are focused solely on exposing a system securely.