N10-005 · Question #715
An administrator would like to provide outside access to the company web server and separate the traffic from the local network. Which of the following would the administrator use to accomplish this?
The correct answer is D. Demilitarized Zone. A DMZ (Demilitarized Zone) is a network segment placed between the public internet and the internal LAN, typically created using a firewall with three interfaces. Public-facing servers (web, email, FTP) are placed in the DMZ so that external users can access them without having…
Question
An administrator would like to provide outside access to the company web server and separate the traffic from the local network. Which of the following would the administrator use to accomplish this?
Options
- ANetwork Address Translation
- BStateful Inspection
- CPort Address Translation
- DDemilitarized Zone
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- D94% (30)
Explanation
A DMZ (Demilitarized Zone) is a network segment placed between the public internet and the internal LAN, typically created using a firewall with three interfaces. Public-facing servers (web, email, FTP) are placed in the DMZ so that external users can access them without having direct access to the internal network. If a DMZ server is compromised, the attacker is still separated from the internal LAN. NAT and PAT translate IP addresses but do not create network separation. Stateful inspection is a firewall technique for tracking connection states. Only a DMZ accomplishes both goals: external access and network separation.
Topics
Community Discussion
No community discussion yet for this question.