What is one advantage of setting up a DMZ with two firewalls?

One advantage of setting up a DMZ (Demilitarized Zone) with two firewalls in a network security architecture is to provide an additional layer of security. This setup involves positioning one firewall between the untrusted network (such as the Internet) and the DMZ, and the other firewall between the DMZ and the internal network. This dual firewall configuration creates a controlled buffer zone that allows for public access to specific services (e.g., web servers, email servers) while protecting the internal network. If an attacker compromises a server in the DMZ, the internal network is still protected by the second firewall, significantly reducing the potential impact of the attack.