Which of the following would be used to place extranet servers in a separate subnet for security purposes?

The correct answer is C. DMZ. A DMZ (Demilitarized Zone) is a network security architecture that places publicly accessible servers (such as extranet servers, web servers, or email servers) in a separate, isolated subnet between the untrusted external network and the trusted internal network, typically…

Network security

Question

Options

AVPN
BNAT
CDMZ
DIDS

How the community answered

(24 responses)

B
4% (1)
C
88% (21)
D
8% (2)

Explanation

A DMZ (Demilitarized Zone) is a network security architecture that places publicly accessible servers (such as extranet servers, web servers, or email servers) in a separate, isolated subnet between the untrusted external network and the trusted internal network, typically enforced by firewalls. This limits the exposure of the internal network: if an extranet server is compromised, the attacker cannot directly pivot into the internal LAN. A VPN creates encrypted tunnels for remote access, not server isolation. NAT translates IP addresses and provides some obscurity but is not a segmentation security control. An IDS (Intrusion Detection System) monitors for suspicious activity but does not create network segmentation.

Topics

#DMZ#extranet#network segmentation#security zones

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice