CV0-003 Question #385: Real Exam Question with Answer & Explanation

The correct answer is D: DMZ. A DMZ (Demilitarized Zone) is a network topology segment specifically designed to isolate publicly accessible hosts from the internal private network.

Security

Question

Which of the following is a networking topology concept used when placing publicly accessible hosts on a network?

Options

AVPN
BPAT
CVLAN
DDMZ

Explanation

A DMZ (Demilitarized Zone) is a network topology segment specifically designed to isolate publicly accessible hosts from the internal private network.

Common mistakes.

A. A VPN (Virtual Private Network) creates an encrypted tunnel for secure remote access between endpoints and is not a network placement topology for publicly accessible servers.
B. PAT (Port Address Translation) is a variant of NAT that maps multiple private IPs to a single public IP using port numbers - it is an address translation technique, not a hosting topology.
C. A VLAN (Virtual LAN) provides logical segmentation of a network for traffic isolation and management but is not the named topology concept used specifically for placing publicly accessible hosts.

Concept tested. DMZ topology for public-facing host placement

Reference. https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/secure-vnet-dmz

Topics

#DMZ#network topology#public-facing hosts#network segmentation

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice