Which combination of hosts may be placed in the DMZ according to the material?

• A. Public webservers
• B. Both A and B
• C. Eternal DNS servers
• D. Neither A nor B

Answer: (B)

In a DMZ, you place services that must be reachable from the Internet but should be kept separate from the internal network. Public web servers fit this role because they need to be accessible by users worldwide, while still being isolated from the trusted internal systems. External DNS servers also belong in the DMZ because they must answer queries from the Internet without giving attackers direct access to internal resources. Hosting both types in the DMZ provides controlled access to these public services while maintaining a barrier between the Internet and the internal network. So the combination that includes both public web servers and external DNS servers is appropriate.