CAS-003 · Question #271
A system administrator has installed a new Internet facing secure web application that consists of a Linux web server and Windows SQL server into a new corporate site. The administrator wants to…
The correct answer is B. Create an Internet zone, DMZ, and Internal zone on the firewall. The correct architecture uses three zones: Internet, DMZ, and Internal. The Linux web server, which is internet-facing, belongs in the DMZ - isolated from both the raw internet and the internal corporate network. The Windows SQL server holds backend data and should never be…
Question
A system administrator has installed a new Internet facing secure web application that consists of a Linux web server and Windows SQL server into a new corporate site. The administrator wants to place the servers in the most logical network security zones and implement the appropriate security controls. Which of the following scenarios BEST accomplishes this goal?
Options
- ACreate an Internet zone, DMZ, and Internal zone on the firewall.
- BCreate an Internet zone, DMZ, and Internal zone on the firewall.
- CCreate an Internet zone and two DMZ zones on the firewall.
- DCreate an Internet zone and two DMZ zones on the firewall.
How the community answered
(46 responses)- A2% (1)
- B80% (37)
- C4% (2)
- D13% (6)
Explanation
The correct architecture uses three zones: Internet, DMZ, and Internal. The Linux web server, which is internet-facing, belongs in the DMZ - isolated from both the raw internet and the internal corporate network. The Windows SQL server holds backend data and should never be directly internet-accessible, so it belongs in the Internal zone, accessible only from the DMZ web server via firewall rules. This defense-in-depth model ensures an attacker who compromises the web server still faces a firewall before reaching the database. Placing both servers in a single DMZ (options C/D) would expose the SQL server to unnecessary risk. The answer is B, which reflects the standard three-tier web application security architecture.
Topics
Community Discussion
No community discussion yet for this question.