The DMZ cannot be a dedicated port on the firewall device linking a single bastion host.

Question

Quizplus · Accepted Answer

The DMZ can be a dedicated port on the firewall device linking a single bastion host. This configuration is known as a single-homed DMZ. However, it is not considered best practice as it increases the risk of compromise if the bastion host is breached. It is recommended to use a dual-homed DMZ configuration where the bastion host is connected to both the DMZ and internal network, with the firewall acting as a gateway between the two.

The DMZ Cannot Be a Dedicated Port on the Firewall