An organization wants to improve its ability to detect infiltration of servers in a DMZ, IPS/IDS solutions are
currently located on the edge between DMZ and Untrust, and DMZ and Trust. Which of the following can
increase visibility inside the DMZ?

A.
Layer 7 firewall

B.
Honeypot

C.
NAC server

D.
Host-based firewalls in the DMZ

Explanation:
https://en.wikipedia.org/wiki/DMZ_(computing)