ISC2 CCSP Exam - Topic 7 Question 107 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 107
Topic #: 7

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

AProxy

BBastion

CHoneypot

DWAF

Show Suggested Answer

Suggested Answer: B

A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more stringent security hardening and monitoring.

by Jettie at Aug 14, 2025, 08:34 AM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jillian

7 months ago

Wait, are we sure about that? Sounds tricky!

upvoted 0 times

...

Makeda

7 months ago

Bastion is the right answer, no doubt.

upvoted 0 times

...

Ciara

7 months ago

Honeypots are for traps, not hardened hosts!

upvoted 0 times

...

Antonio

7 months ago

I thought it was a Proxy.

upvoted 0 times

...

Princess

8 months ago

Definitely a Bastion host!

upvoted 0 times

...

India

8 months ago

I’m a bit confused between Bastion and Proxy. I know proxies handle requests, but I can't recall if they fit this description.

upvoted 0 times

...

Van

8 months ago

I feel like I've seen a question like this before, and Bastion was definitely the term used for a secure host exposed to the Internet.

upvoted 0 times

...

Joanna

8 months ago

I remember something about honeypots, but they seem more like traps than hardened hosts for authorized users.

upvoted 0 times

...

Tamar

9 months ago

I think the answer might be Bastion, but I'm not entirely sure. It sounds familiar from our last practice session.

upvoted 0 times

...

Marlon

9 months ago

Wait, is it a honeypot? That's a system intentionally exposed to the public internet to lure and study attackers. Or maybe a WAF (web application firewall)? I'm a little confused on the best answer here.

upvoted 0 times

...

Kara

9 months ago

A bastion host, for sure. That's the classic example of a hardened, public-facing system that's used for secure access to internal resources. I feel pretty confident about this one.

upvoted 0 times

...

Santos

9 months ago

Hmm, I'm not totally sure about this one. Could it also be a proxy server that's exposed to the internet and locked down to only allow authorized traffic? I'll have to think this through a bit more.

upvoted 0 times

...

Rikki

9 months ago

This one seems pretty straightforward. I'm thinking it's a bastion host - that's the type of hardened, public-facing system that's commonly used for secure remote access.

upvoted 0 times

...