Jump Server for Securing Internal Resources

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?

RDP server
Jump server Correct Answer
Proxy server
Hypervisor

Answer Correct answer: B — A jump server acts as a hardened, controlled access point to prevent unauthorized direct access to internal company resources.

Community Votes

100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests the specific function of a jump server versus other network services; the common trap is confusing it with a proxy server, which primarily handles web traffic rather than secure administrative access to internal infrastructure.

A jump server (or bastion host) is the correct solution for creating an added layer of security by preventing unauthorized access to internal company resources, as it acts as a controlled chokepoint for administrative access.

Some learners select Proxy server (C), mistakenly believing that any intermediary filtering traffic qualifies as securing internal resources, whereas proxies are typically for external web content or reverse-proxying specific services, not general internal admin access.

Community Discussion (12 comments)

Mehsotopes 👍 13 Selected: B

A Proxy Server is used to fetch Internet content requested for access by internal users, & can also be configured to cache content for a specified amount of time so that subsequent requests for content are satisfied locally instead of from the Internet. A Jump Server protects internal company resources that would have no reason to be accessed by the outside.

Etc_Shadow28000 👍 9 Selected: B

To create an added layer of security by preventing unauthorized access to internal company resources, the best solution would be: B. Jump server A jump server (or jump box) acts as a controlled access point that administrators must go through to access internal resources. It creates an additional layer of security by acting as a secure intermediary, allowing only authorized users to access internal servers and systems. This reduces the attack surface by limiting direct access to sensitive resources and can be closely monitored and secured.

Markie100 👍 1 Selected: B

A jump server is the best solution for creating an added layer of security by preventing unauthorized access to internal company resources, as it provides controlled access, isolation, and monitoring capabilities.

braveheart22 👍 1 Selected: B

The correct answer is B. Jump Server: Secure access point for administrators to connect to internal systems, used to enforce strong access controls for remote management. Proxy Server: on the other hand is an Intermediary for controlling traffic, used for web filtering, caching, and traffic anonymization.

Donny_575 👍 1 Selected: C

Proxy servers can be either forward or reverse. A reverse proxy server would create an added layer of security by preventing unauthorized access to internal company resources by filtering unapproved IPs. A jump server provides admins with a secure, direct route into internal networks. It does not add an additional layer of security to the internal network

Syl0 👍 5

RDP - Remote Desktop Protocol Server Jump server - Creates a barrier between network Proxy Server - Grant access to Internet Hypervisor - hosts several VMs at one time

dbrowndiver 👍 3 Selected: B

Isolation and Monitoring: Jump servers provide isolation between different network segments, allowing for detailed monitoring and logging of access attempts. This helps in detecting and responding to unauthorized access attempts swiftly. Reduced Attack Surface: By limiting the entry points to critical systems, a jump server reduces the attack surface, making it harder for attackers to find vulnerabilities in the system.

SHADTECH123 👍 1 Selected: B

ump Server is designed to provide an additional layer of security by acting as a secure intermediary between the user's workstation and internal company resources. It ensures that all access to sensitive internal resources goes through a controlled and monitored access point, enhancing security by preventing unauthorized direct access.

SHADTECH123 👍 1 Selected: B

Jump Server is specifically designed to add an extra layer of security by serving as a controlled access point. It ensures that all access to internal resources must pass through this secure intermediary, allowing for enhanced monitoring, logging, and restriction of unauthorized access.

shady23 👍 1 Selected: B

B. Jump server

Yoez 👍 1

Correct Answer: B

e5c1bb5 👍 4 Selected: B

jump servers are specifically hardened and act as a chokepoint and access point to internal resources. The idea being its the only way in and its damn hard to compromise it. correct me if you have other ideas. thank you

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

A jump server, also known as a bastion host, is specifically designed to provide a secure, isolated entry point into a private network. By forcing administrators to authenticate and connect through this single, hardened system before accessing internal resources, organizations significantly reduce the attack surface. This creates the 'added layer' of security described in the scenario by ensuring all access is monitored, logged, and strictly controlled.

Why the Other Options Are Wrong

RDP server (A) is a protocol/service used for remote desktop connections but does not inherently provide the isolation or security hardening required; using RDP directly from the internet is insecure. A proxy server (C) primarily manages web traffic, caching, and filtering for internal users accessing the internet or reverse-proxies specific applications, but it is not the standard architectural solution for securing general internal administrative access. A hypervisor (D) is virtualization software that hosts virtual machines and has no direct role in network access control or security layering.

Community Comment Notes

The community overwhelmingly supports option B. As Mehsotopes noted, a proxy fetches internet content, while a jump server protects internal resources. Etc_Shadow28000 correctly identifies it as a controlled access point. e5c1bb5 emphasizes that jump servers are hardened and act as a chokepoint. dbrowndiver highlights the benefits of isolation and monitoring. Markie100 confirms it provides controlled access and isolation. braveheart22 contrasts it with proxy servers which handle web filtering. SHADTECH123 reiterates that it ensures all access goes through a controlled intermediary.

Exam Strategy

When asked about securing access to internal systems, look for terms like 'bastion host,' 'jump box,' or 'controlled access point.' These indicate a need for a hardened, isolated entry point, distinct from general traffic management tools like proxies.

Frequently Asked Questions

Why isn't a proxy server the best choice?

Proxies manage web traffic and caching for internet access. They do not provide the dedicated, hardened isolation required for secure administrative access to internal infrastructure.

What is a bastion host?

A bastion host is another term for a jump server. It is a specialized computer designed to withstand attacks and serve as a secure gateway to a private network.

More SY0-701 FAQ →

Related Analysis

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide