When discussing a bastion host and a DMZ, which statement accurately differentiates their primary functions?0.5 MarksA bastion host is responsible for isolating internal services, while a DMZ controls access to the internal network.A bastion host exclusively handles load balancing for incoming traffic, while a DMZ manages user authentication. A bastion host is placed in the internal network, while a DMZ is located within the external network perimeter.A bastion host encrypts all network communication, while a DMZ decrypts incoming traffic for inspection.A bastion host provides a controlled entry point for external access, while a DMZ segregates and hosts external-facing services.

In a complex network environment, you decide to implement a bastion host. Which security measure would be least effective when combined with the bastion host to ensure robust security?0.5 MarksPlacing the bastion host within the internal networkRegularly rotating SSH key pairs used for accessing the bastion hostMulti-factor authentication for accessing the bastion hostLimiting the bastion host's access only to necessary resourcesImplementing intrusion detection and prevention systems on the bastion host

In a network architecture with a DMZ, why is it recommended to use separate physical or virtual machines for different services within the DMZ?0.5 MarksIt reduces the overall cost of hardware maintenanceIt simplifies network routing and eliminates the need for firewallsIt prevents the need for any security measures within the DMZ It minimizes the need for monitoring and loggingIt contains the potential spread of security breaches across services

What is the purpose of a DMZ?It provides secure connectivity for clients that connect to the internal network through a wireless LAN.It analyzes traffic for intrusion attempts and sends reports to management stations.It creates an encrypted and authenticated tunnel for remote hosts to access the internal network.It allows external hosts to access specific company servers while maintaining the security restrictions for the internal network.

You're setting up a secure network architecture. A bastion host is a key component. What role does it primarily serve?0.5 MarksHosting the main websiteMonitoring and managing incoming/outgoing traffic Load balancing the network trafficProviding DNS resolutionStoring sensitive user data

In a DMZ (Demilitarized Zone) setup, which of the following systems should ideally be placed within this zone for maximum security?0.5 MarksEmployee workstations and laptopsDomain Controller handling user authenticationBackup servers for data recoveryPublic-facing web serversInternal databases containing customer information