CompTIA Network+ N10-006 Q388

An organization wants to improve its ability to detect infiltration of servers in a DMZ, IPS/IDS solutions are currently located on the edge between DMZ and Untrust, and DMZ and Trust. Which of the following can increase visibility inside the DMZ?

A. Layer 7 firewall
B. Honeypot
C. NAC server
D. Host-based firewalls in the DMZ

Correct Answer: A

Explanation/Reference:
https://en.wikipedia.org/wiki/DMZ_(computing)