A security analyst needs to ensure all external traffic is able to access the company's front-end servers but protect all access to internal resources. Which of the following network design elements…

The correct answer is A. DMZ. A DMZ (Demilitarized Zone) is a network segment placed between the public internet and the internal private network. It hosts publicly accessible servers (web servers, mail servers, etc.) so external users can reach them, while a firewall prevents that external traffic from…

Security architecture

Question

A security analyst needs to ensure all external traffic is able to access the company's front-end servers but protect all access to internal resources. Which of the following network design elements would MOST likely be recommended?

Options

ADMZ
BCloud computing
CVLAN
DVirtualization

How the community answered

(21 responses)

A
90% (19)
C
5% (1)
D
5% (1)

Explanation

A DMZ (Demilitarized Zone) is a network segment placed between the public internet and the internal private network. It hosts publicly accessible servers (web servers, mail servers, etc.) so external users can reach them, while a firewall prevents that external traffic from ever reaching internal resources. This two-firewall (or dual-interface firewall) architecture is the standard design for exactly this scenario - exposing front-end services to the internet while shielding backend systems. Cloud computing, VLANs, and virtualization are general infrastructure concepts that do not inherently provide this specific boundary isolation.

Topics

#DMZ#network segmentation#perimeter security#network design

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice