nerdexam
Isaca

CISM · Question #337

Which of the following devices, when placed in a demilitarized zone (DMZ), would be considered the MOST significant exposure?

The correct answer is A. Database server. A database server placed in a demilitarized zone (DMZ) would be the most significant exposure. The DMZ is typically used for servers that need to be accessible from external networks, such as web or mail servers. A database server, which often contains sensitive business data…

Submitted by naveen.iyer· Apr 18, 2026Information Security Risk Management

Question

Which of the following devices, when placed in a demilitarized zone (DMZ), would be considered the MOST significant exposure?

Options

  • ADatabase server
  • BMail relay server
  • CApplication server
  • DProxy server

How the community answered

(14 responses)
  • A
    86% (12)
  • B
    7% (1)
  • C
    7% (1)

Explanation

A database server placed in a demilitarized zone (DMZ) would be the most significant exposure. The DMZ is typically used for servers that need to be accessible from external networks, such as web or mail servers. A database server, which often contains sensitive business data, is typically kept in a more secure internal network to prevent unauthorized access. Placing it in the DMZ exposes it to greater risk.

Topics

#DMZ#Risk Assessment#Network Security#Data Exposure

Community Discussion

No community discussion yet for this question.

Full CISM Practice