The general philosophy for DMZ’s are that:

A.
any system on the DMZ can be compromised because it’s accessible from the Internet

B.
any system on the DMZ cannot be compromised because it’s not accessible from the Internet

C.
some systems on the DMZ can be compromised because they are accessible from the Internet

D.
any system on the DMZ cannot be compromised because it’s by definition 100% safe and not
accessible from the Internet