MENU
What can best be defined as a strongly protected computer that is in a network protected by a firewall (or is part of a firewall) and is the only host (or one of only a few hosts) in the network that can be directly accessed from networks on the other side of the firewall?
Suggested Answer: A
Get Premium SSCP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Internet Security Glossary (RFC2828) defines a bastion host as a strongly protected computer that is in a network protected by a firewall (or is part of a firewall) and is the only host (or one of only a few hosts) in the network that can be directly accessed from networks on the other side of the firewall.
Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.
13 comments · newest first
TE
Tenesha
11 months ago
Wait, are we sure about that? Sounds too simple.
SA
Sage
12 months ago
Totally agree, bastion host is the way to go!
AL
Aleshia
12 months ago
A screened subnet is different, right?
GA
Gail
12 months ago
I thought it was a proxy server at first.
JO
Joanne
1 year ago
Definitely a bastion host! It's the only one exposed.
DO
Dorian
1 year ago
I’m a bit confused between A and C. I know a dual-homed host has multiple network connections, but does it really match this definition?
JA
James
1 year ago
I recall practicing a question similar to this, and I think bastion host was the correct term. It’s the one that stands out to me.
LU
Luther
1 year ago
I’m not entirely sure, but I feel like a screened subnet could also fit the description. It’s about protecting the network, right?
DA
Dante
1 year ago
I think the answer might be A, a bastion host. I remember studying that it’s specifically designed to withstand attacks.
CH
Chaya
1 year ago
Okay, let me see. I know Accounts Payable has to connect with General Ledger, but what are the other two? Purchase Orders and Accounts Receivable seem like good guesses.
AS
Asuncion
1 year ago
I think it's two participating services, but I'm not entirely sure if that's correct.
ER
Eric
1 year ago
Wait, what's the difference between "continuously improving the inspection of facilities" and "systematically reducing the risk associated with pressure boundary failures"? I'm not sure which one is the main purpose of RBI. I'll have to re-read the question.
SH
Shala
1 year ago
This looks like a straightforward question about pen testing reports. I think the answer is B - Activity Report, since that would provide the most detailed information about all the tasks performed during the testing.