How do you design a DMZ architecture for hosting public-facing services? Explain single-firewall and dual-firewall DMZ designs and their security implications.

Sample answer preview

A DMZ, or demilitarized zone, is a network segment that sits between the trusted internal network and the untrusted internet, hosting services that need to be accessible from the outside while protecting the internal network from direct exposure.