Demilitarized zone
A demilitarized zone is a separately controlled network segment between untrusted external networks and protected internal resources that hosts exposed systems while limiting internal access.
Secure APIs
A demilitarized zone is a hardened network segment exposed to untrusted external traffic and positioned between the internet and an internal network.
- How it is used
- Channels inbound API traffic through hardened internet-facing components while keeping backend services private.
- How deep it goes
- Defines the segment, identifies its gateway components, and connects it to subnet isolation and controlled cross-segment communication.
- Examples
- Uses API gateways and bastion servers in the DMZ, with private APIs, databases, and development endpoints kept internal.
- What you can do after
- Designs inbound API infrastructure that exposes selected endpoints while isolating internal services from direct internet traffic.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A demilitarized zone is an isolated network segment for systems that must be reachable from untrusted networks while limiting exposure of internal hosts.
- How it is used
- Uses a separate zone to expose selected servers while limiting access to internal hosts.
- How deep it goes
- Explains DMZ placement and inter-zone policy relationships without detailing device-specific configuration.
- Examples
- Uses public-facing servers as the concrete example of systems placed in a DMZ.
- What you can do after
- Evaluate network layouts by identifying which internet-reachable servers belong in a DMZ rather than the Inside zone.
Related concepts
- segmentkind of · A segment is a distinct portion or bounded region of a larger structure, system, or sequence, with boundaries or properties determined by its context.
- operational technologyconfigures · Operational technology comprises hardware and software systems that monitor or control physical processes, equipment, and industrial operations.
- security zonekind of · A security zone is a logical network segment governed by distinct security rules and access requirements.
- firewalluses · A firewall is a network security system that monitors and filters communications according to rules governing which traffic is permitted or blocked.
- serverhas part · A server is a computer system or software process that receives requests from clients or other systems and provides resources, data, or services in response.
- network segmentationimplements · Network segmentation is the division of a network into distinct physical or logical zones with controlled communication between them.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.