You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture i

Placing all three servers internally makes the web server unreachable from the Internet, defeating the purpose of hosting a public-facing application.

This is the standard three-tier DMZ architecture: the web server in the DMZ handles Internet-facing requests, the application server on the internal network processes business logic, and the database server remains fully internal - ensuring that a compromise of the web tier does not grant direct access to sensitive data or application logic.

Exposing the database server directly to the Internet creates a severe security risk, as it contains sensitive data and should never be reachable from untrusted networks.

Inter-tier communication in a three-tier architecture occurs over internal network segments, not the public Internet, so there is no technical requirement for all servers to be Internet-facing.