iSACA Cybersecurity Fundamentals Certification Practice Exam

What is the primary function of a Demilitarized Zone (DMZ) in a network?

1. A separate network allowing controlled access from the internet

2. An internal secure network for employee communication

3. A backup system for organization’s information

4. A type of encrypted messaging protocol

The correct answer is: A separate network allowing controlled access from the internet

The primary function of a Demilitarized Zone (DMZ) in a network is to act as a separate network that allows controlled access from the internet. A DMZ is typically structured to enhance security by creating a buffer zone between an organization's internal network and external networks, such as the internet. By placing certain services, such as web servers, email servers, and DNS servers, in the DMZ, organizations can expose these services to external users while still protecting the internal network from potential attacks. This separation helps to minimize the risk of unauthorized access to sensitive internal resources, as any traffic directed to the DMZ can be monitored and managed without jeopardizing the integrity of the core internal network. The other options describe elements that do not encapsulate the primary purpose of a DMZ. While an internal secure network for employee communication focuses on internal security postures, it does not address the external accessibility aspect. A backup system pertains to data recovery rather than network demarcation, and an encrypted messaging protocol relates to securing communication rather than network segmentation. Hence, the correct answer accurately captures the essence of a DMZ's role in network architecture.