nerdexam
CompTIA

SY0-301 · Question #507

When designing a new network infrastructure, a security administrator requests that the intranet web server be placed in an isolated area of the network for security purposes. Which of the following d

The correct answer is A. DMZ. A DMZ (Demilitarized Zone) is a network segment isolated from both the internal (trusted) network and the external internet, used to host servers that need to be accessible while being separated for security. Placing an intranet web server in a DMZ protects the internal network e

Security architecture

Question

When designing a new network infrastructure, a security administrator requests that the intranet web server be placed in an isolated area of the network for security purposes. Which of the following design elements would be implemented to comply with the security administrator's request?

Options

  • ADMZ
  • BCloud services
  • CVirtualization
  • DSandboxing

How the community answered

(49 responses)
  • A
    86% (42)
  • B
    2% (1)
  • C
    4% (2)
  • D
    8% (4)

Explanation

A DMZ (Demilitarized Zone) is a network segment isolated from both the internal (trusted) network and the external internet, used to host servers that need to be accessible while being separated for security. Placing an intranet web server in a DMZ protects the internal network even if the server is compromised. Cloud services (B) move the server off-premises entirely. Virtualization (C) partitions hardware resources but does not inherently create network isolation. Sandboxing (D) isolates application processes, not network segments.

Topics

#DMZ#network segmentation#web server isolation#perimeter security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice