Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Regarding firewalls, what's a bastion host?
It's a layer of defense between the DMZ and an intranet
It screens for malware
It's a computer that is fully exposed to attack.
It divides a LAN into subnets
A bastion host protects internal networks by acting as a layer of defense between the Internet and an intranet. A bastion host is a computer that is fully exposed to attack. The system is on the public side of the demilitarized zone (DMZ), unprotected by a firewall or filtering router. Frequently the roles of these systems are critical to the network security system. (source: https://www.sans.org/security-resources/idfaq/what-is-a-bastion-host/2/11) In short, a bastion host is a hardened server that is expected to be attacked. It trusts nothing and no one trusts it. EDIT the explanation is also true for the third question.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.