How can a database administrator access restricted database servers?

A company prevented direct access from the database administrators’ workstations to the network segment that contains database servers. Which of the following should a database administrator use to access the database servers?

  1. Jump server Source Reference Answer
  2. RADIUS
  3. HSM
  4. Load balancer

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests your knowledge of access control architecture, specifically the use of jump servers to bridge secure and less-secure network segments while minimizing attack surface.

A jump server (bastion host) is used as a secure intermediary to access restricted network segments such as database servers. The CompTIA SY0-701 community unanimously agrees that jump servers provide the controlled gateway required when direct access is prohibited.

Some candidates confuse RADIUS with a network access gateway; RADIUS is an authentication and authorization protocol, not a system that provides remote access to restricted network segments.

Community Discussion (11 comments)

MahiMahiMahi 👍 20 Selected: A
Maybe it's my ADHD but that is worded in a way that is very difficult to understand,
rjbb 👍 14 Selected: A
It would be a jump server. A jump server is a secure node that sits between the untrusted network and the secure zone (where the Database servers are).
JackExam2025 👍 1 Selected: A
Jump server is the right choice because it's designed to allow access to otherwise restricted networks or systems, offering an additional layer of security by acting as a controlled entry point.
Hasss 👍 1 Selected: A
jump server
JRCHENRY 👍 1 Selected: A
A jump server is a secure computer system that acts as an intermediary between a less trusted network (like the internet) and a more secure, internal network. It's essentially a "gateway" that allows authorized users to access and manage devices within the secure network.
Rafili 👍 1 Selected: A
A jump server (or jump box) is a secure computer that acts as a bridge or intermediary between a less secure network (the administrators' workstations) and a more secure network (the database servers). Database administrators can connect to the jump server and then access the database servers, providing an additional layer of security by controlling access and monitoring their actions.
ProudFather 👍 1 Selected: A
Jump Server: A jump server is a dedicated server that acts as an intermediary between the database administrator's workstation and the database servers. The database administrator can log into the jump server and then use it to access the database servers using secure protocols like SSH.
dbrowndiver 👍 4 Selected: A
A jump server, also known as a jump host or bastion host, is a secure system used to bridge the gap between a secure network segment and a less secure one. It acts as a gateway, allowing authorized users to connect to servers in a restricted network segment securely.
dbrowndiver 👍 3
Jump servers are commonly used in environments where direct access to sensitive network segments is restricted to minimize the attack surface and enhance security.
Lanka22 👍 1 Selected: A
It would be a jump server
shady23 👍 2 Selected: A
A. Jump server

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

A jump server (also called a bastion host or jump box) is specifically designed to act as a secure intermediary between untrusted or less-trusted networks and highly secured internal segments. By forcing database administrators to first connect to the jump server, the organization creates a single, hardened, and auditable entry point. This architecture effectively prevents direct workstation-to-database connections, reducing the attack surface. Community comment [7] clearly explains that the jump server acts as a bridge, allowing admins to connect securely before reaching the database servers.

Why the Other Options Are Wrong

RADIUS (option B) is a protocol for centralized authentication, authorization, and accounting—not a system that provides remote access to a network segment. An HSM (option C) is a hardware device for cryptographic key management and has no role in facilitating administrative network access. A load balancer (option D) distributes traffic across multiple servers for availability and performance but does not serve as a secure access gateway for administrators.

Community Comment Notes

Comment [1] highlights that the question wording can be confusing, but the community consensus is strong and unanimous for option A. Comment [2] succinctly defines the jump server as a secure node between the untrusted network and the secure zone. Comments [3], [5], and [8] reinforce the concept that jump servers offer an additional security layer by acting as a controlled, monitored entry point using protocols such as SSH.

Official Reference

https://csrc.nist.gov/glossary/term/jump_server

Exam Strategy

When a question describes restricted direct access to a sensitive network segment, immediately think of intermediary systems. Jump servers, bastion hosts, and proxy gateways are the CompTIA-preferred solutions for controlled administrative access to secure zones.

Related Analysis

A company is working with a vendor to perform a penetration

A-Grade

A security team has been alerted to a flood of incoming emai

S-Grade

A security investigation revealed that malicious software wa

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide