Which statement is true about a DMZ in a traditional network firewall design?

Which statement is true about a DMZ in a traditional network firewall design?

• A DMZ is designed to provide service for external access but not for internal access.
• Servers in the DMZ provide limited information that can be accessed from external networks.
• User access to the DMZ from the Internet and the internal network usually is treated the same way.
• All servers in the enterprise network should be located in a DMZ because of enhanced security measures.

Exam with this question: CCNA Discovery 4: DCompNtwk Chapter 1 Exam