MENU
Ron has configured his network to provide strong perimeter security. As part of his network architecture, he has included a host that is fully exposed to attack. The system is on the public side of the demilitarized zone, unprotected by a firewall or filtering router. What would you call such a host?
Suggested Answer: D
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
A bastion host is a gateway between an inside network and an outside network. Used as a security measure, the bastion host is designed to defend against attacks aimed at the inside network. Depending on a network's complexity and configuration, a single bastion host may stand guard by itself, or be part of a larger security system with different layers of protection.
12 comments · newest first
TI
Tiffiny
12 months ago
Wait, is it really exposed like that? Sounds sketchy!
LY
Lynna
12 months ago
Seems like a risky setup, not sure I’d trust that.
RE
Rebecka
1 year ago
No way, it's a Honeypot for sure!
VA
Val
1 year ago
I thought it was a DMZ host?
MA
Malcom
1 year ago
That's definitely a Bastion Host.
CE
Cecily
1 year ago
I recall that a bastion host is typically a strong point in a network, but if it's unprotected, could it still be considered a bastion host? I’m not confident about this one.
KR
Kris
1 year ago
I’m a bit confused because I thought a honeypot was meant to lure attackers, but this host is just exposed. Is it really a honeypot?
DE
Delfina
1 year ago
I feel like this question is similar to one we practiced where we discussed bastion hosts. I think that might be the answer, but I could be mixing it up.
PA
Paz
1 year ago
I remember studying about DMZs, and I think a host in that area is often referred to as a DMZ host, but I'm not entirely sure if that's the right term here.
LE
Lemuel
1 year ago
Okay, I think I've got this. The key is to focus on the root cause - that unapproved app. I'd start by uninstalling it and see if that resolves the data leak.
SA
Sanda
1 year ago
Okay, I've got a strategy - I'll eliminate the options that don't fit the criteria first, then choose the best remaining answer.
EL
Elin
1 year ago
I vaguely recall our discussions including all these points being interconnected. Maybe "All of the above" is the safest option?