which two parameters should you set to protect your dmz servers

Which two parameters should you set to protect your DMZ servers in the most-time-efficient manner?