A programming team is deploying a new PHP module to be run on a Solaris 10 server with trusted extensions. The server is configured with three zones, a management zone, a customer zone, and a…

Question

Options

• AThe PHP module is written to transfer data from the customer zone to the management zone,
• BThe iptables configuration is not configured correctly to permit zone to zone communications
• CThe PHP module was installed in the management zone, but is trying to call a routine in the
• DThe ipfilters configuration is configured to disallow loopback traffic between the physical NICs

• A
  7% (4)
• B
  26% (14)
• C
  56% (30)
• D
  11% (6)

Explanation

The correct answer is C. In Solaris 10 Trusted Extensions, zones are security boundaries and only programs in the management zone are permitted to mediate data between zones. The PHP payment module needs to interact with the customer zone (customer-facing input) and the backend zone (payment processing). If the PHP module was installed in the management zone but is coded to directly call routines or libraries residing in the backend zone (rather than invoking them through the management zone's sanctioned inter-zone communication path), it will fail because the trusted extension policy blocks direct zone-to-zone calls from non-management zone processes. Option B is incorrect because Solaris uses ipfilter, not Linux's iptables. Options A and D describe less likely configuration scenarios.

No community discussion yet for this question.