An organization wants to improve its ability to detect infiltration of servers in a DMZ, IPS/IDS solutions are
currently located on the edge between DMZ and Untrust, and DMZ and Trust. Which of the following can
increase visibility inside the DMZ?
A.
Layer 7 firewall
B.
Honeypot
C.
NAC server
D.
Host-based firewalls in the DMZ
Explanation:
https://en.wikipedia.org/wiki/DMZ_(computing)