SK0-003 · Question #214
While considering security, which of the following is the BEST place for a public web server accessible via the Internet?
The correct answer is D. DMZ. For security, a public web server that needs to be accessible from the internet should be placed in a Demilitarized Zone (DMZ) to isolate it from the internal network.
Question
While considering security, which of the following is the BEST place for a public web server accessible via the Internet?
Options
- AInternal network
- BVLAN
- CVPN
- DDMZ
How the community answered
(31 responses)- A3% (1)
- C6% (2)
- D90% (28)
Why each option
For security, a public web server that needs to be accessible from the internet should be placed in a Demilitarized Zone (DMZ) to isolate it from the internal network.
Placing a public web server directly on the internal network poses a significant security risk, as a compromise could lead to full access to internal resources.
A VLAN (Virtual LAN) segments a network but does not inherently provide the security isolation from the internet that a DMZ offers for public-facing servers.
A VPN (Virtual Private Network) is used to create a secure, encrypted connection over a public network, primarily for remote access or site-to-site connectivity, not as a hosting zone for public servers.
A DMZ (Demilitarized Zone) is a perimeter network that protects an organization's internal local area network (LAN) from untrusted external networks. Placing public-facing servers like web servers in a DMZ ensures that if the server is compromised, attackers do not gain direct access to the sensitive internal network.
Concept tested: DMZ for public server security
Source: https://learn.microsoft.com/en-us/azure/architecture/example-scenario/dmz/network-dmz
Topics
Community Discussion
No community discussion yet for this question.