Protecting Servers and Services for External Clients | SY0-601 Exam Answer

C.

The appropriate network structure used to protect servers and services that must be provided to external clients without completely eliminating access for internal users is a DMZ (Demilitarized Zone).

A DMZ is a separate network that sits between an organization's internal network and the public internet. It allows external users to access certain services, such as email or web servers, while preventing direct access to the organization's internal network.

By using a DMZ, an organization can provide services to external clients while keeping its internal network protected from potential threats. This is achieved by placing servers that need to be accessed by external clients in the DMZ, while internal users are kept on a separate network.

NAC (Network Access Control) is a security solution that ensures only authorized devices can connect to a network, VLAN (Virtual Local Area Network) is a network segmentation technology that divides a physical network into smaller logical networks, and a Subnet is a subdivision of an IP network. While all of these technologies can contribute to network security, they are not specifically designed to protect servers and services that need to be accessed by external clients.