[Users] Bridge w/o IP address?

I want to put multiple VMs on the same hypervisor, some will be Internet facing, some will be internal facing. I obviously don't want the hypervisor to be an attack vector, so I don't want the HV to have an IP address on the DMZ network. Is this configuration as simple as creating another another bridge like the ovirtmgmt bridge, not giving it an IP address, and adding it to the DMZ facing hosts?