Which term refers to a protected network created with a two- or three-homed firewall behind a screening firewall, commonly used to refer to the DMZ?

• A. DMZ
• B. Screened Subnet
• C. Multi-homed Firewall
• D. Hardware Firewalls

Answer: (B)

Screened subnet describes a DMZ topology where a two- or three-homed firewall sits behind an outer screening firewall, creating a protected subnet between the Internet and the internal network. The outer firewall acts as the point of entry that screens traffic before it reaches the DMZ, while an inner firewall governs traffic into and out of that DMZ. This layered defense isolates publicly exposed services from the internal network and is the classic way to implement a DMZ. That’s why this term fits best for the described setup. The term DMZ refers to the zone itself, not the specific topology; a multi-homed firewall describes a firewall with multiple interfaces, not the particular screened arrangement; hardware firewalls is too generic and doesn’t capture the topology.