What does the DMZ (exposed host) function do ?

The DMZ function disables PAT (Port Address Translation), allowing full bi-directional communication between one client computer and the Internet.

This opens all ports on that particular client computer, therefore posing some security risk. It allows full bi-directional public access and is sometimes required for gaming and testing programs that use dynamic ports to communicate.