Jump Server for Securing Internal Resources

SY0-701 By islever Editorial Last updated

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

Short answer

B A jump server acts as a hardened, controlled access point to prevent unauthorized direct access to internal company resources.

Question

An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?
  1. RDP server
  2. Jump server Correct Answer
  3. Proxy server
  4. Hypervisor

Key Takeaways

The question tests the specific function of a jump server versus other network services; the common trap is confusing it with a proxy server, which primarily handles web traffic rather than secure administrative access to internal infrastructure.

A jump server (or bastion host) is the correct solution for creating an added layer of security by preventing unauthorized access to internal company resources, as it acts as a controlled chokepoint for administrative access.

Common mistake: Some learners select Proxy server (C), mistakenly believing that any intermediary filtering traffic qualifies as securing internal resources, whereas proxies are typically for external web content or reverse-proxying specific services, not general internal admin access.

Expert Analysis

Why the Answer Is Correct

A jump server, also known as a bastion host, is specifically designed to provide a secure, isolated entry point into a private network. By forcing administrators to authenticate and connect through this single, hardened system before accessing internal resources, organizations significantly reduce the attack surface. This creates the 'added layer' of security described in the scenario by ensuring all access is monitored, logged, and strictly controlled.

Why the Other Options Are Wrong

RDP server (A) is a protocol/service used for remote desktop connections but does not inherently provide the isolation or security hardening required; using RDP directly from the internet is insecure. A proxy server (C) primarily manages web traffic, caching, and filtering for internal users accessing the internet or reverse-proxies specific applications, but it is not the standard architectural solution for securing general internal administrative access. A hypervisor (D) is virtualization software that hosts virtual machines and has no direct role in network access control or security layering.

Community Comment Notes

The community overwhelmingly supports option B. As Mehsotopes noted, a proxy fetches internet content, while a jump server protects internal resources. Etc_Shadow28000 correctly identifies it as a controlled access point. e5c1bb5 emphasizes that jump servers are hardened and act as a chokepoint. dbrowndiver highlights the benefits of isolation and monitoring. Markie100 confirms it provides controlled access and isolation. braveheart22 contrasts it with proxy servers which handle web filtering. SHADTECH123 reiterates that it ensures all access goes through a controlled intermediary.

Exam Strategy

When asked about securing access to internal systems, look for terms like 'bastion host,' 'jump box,' or 'controlled access point.' These indicate a need for a hardened, isolated entry point, distinct from general traffic management tools like proxies.

Frequently Asked Questions

Why isn't a proxy server the best choice?

Proxies manage web traffic and caching for internet access. They do not provide the dedicated, hardened isolation required for secure administrative access to internal infrastructure.

What is a bastion host?

A bastion host is another term for a jump server. It is a specialized computer designed to withstand attacks and serve as a secure gateway to a private network.

More SY0-701 FAQ →

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 12 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 12

  1. Mehsotopes 👍 13 Answered B
    A Proxy Server is used to fetch Internet content requested for access by internal users, & can also be configured to cache content for a specified amount of time so that subsequent requests for content are satisfied locally instead of from the Internet. A Jump Server protects internal company resources that would have no reason to be accessed by the outside.
  2. Etc_Shadow28000 👍 9 Answered B
    To create an added layer of security by preventing unauthorized access to internal company resources, the best solution would be: B. Jump server A jump server (or jump box) acts as a controlled access point that administrators must go through to access internal resources. It creates an additional layer of security by acting as a secure intermediary, allowing only authorized users to access internal servers and systems. This reduces the attack surface by limiting direct access to sensitive resources and can be closely monitored and secured.
  3. Syl0 👍 5
    RDP - Remote Desktop Protocol Server Jump server - Creates a barrier between network Proxy Server - Grant access to Internet Hypervisor - hosts several VMs at one time
  4. e5c1bb5 👍 4 Answered B
    jump servers are specifically hardened and act as a chokepoint and access point to internal resources. The idea being its the only way in and its damn hard to compromise it. correct me if you have other ideas. thank you
  5. dbrowndiver 👍 3 Answered B
    Isolation and Monitoring: Jump servers provide isolation between different network segments, allowing for detailed monitoring and logging of access attempts. This helps in detecting and responding to unauthorized access attempts swiftly. Reduced Attack Surface: By limiting the entry points to critical systems, a jump server reduces the attack surface, making it harder for attackers to find vulnerabilities in the system.
Show 7 more comments
  1. Donny_575 👍 1 Answered C
    Proxy servers can be either forward or reverse. A reverse proxy server would create an added layer of security by preventing unauthorized access to internal company resources by filtering unapproved IPs. A jump server provides admins with a secure, direct route into internal networks. It does not add an additional layer of security to the internal network
  2. SHADTECH123 👍 1 Answered B
    ump Server is designed to provide an additional layer of security by acting as a secure intermediary between the user's workstation and internal company resources. It ensures that all access to sensitive internal resources goes through a controlled and monitored access point, enhancing security by preventing unauthorized direct access.
  3. braveheart22 👍 1 Answered B
    The correct answer is B. Jump Server: Secure access point for administrators to connect to internal systems, used to enforce strong access controls for remote management. Proxy Server: on the other hand is an Intermediary for controlling traffic, used for web filtering, caching, and traffic anonymization.
  4. SHADTECH123 👍 1 Answered B
    Jump Server is specifically designed to add an extra layer of security by serving as a controlled access point. It ensures that all access to internal resources must pass through this secure intermediary, allowing for enhanced monitoring, logging, and restriction of unauthorized access.
  5. Markie100 👍 1 Answered B
    A jump server is the best solution for creating an added layer of security by preventing unauthorized access to internal company resources, as it provides controlled access, isolation, and monitoring capabilities.
  6. Yoez 👍 1
    Correct Answer: B
  7. shady23 👍 1 Answered B
    B. Jump server

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide