A Bastion host enhances security by serving as a single entry point into a network. All external access must pass through this point, making it easier to monitor, control, and secure the network.