SY0-301 · Question #830
Which of the following would MOST likely belong in the DMZ? (Select TWO).
The correct answer is C. Web servers D. SMTP gateways. The DMZ hosts publicly accessible services that need exposure to the internet while remaining separated from the internal network, making web servers and SMTP gateways the correct choices.
Question
Which of the following would MOST likely belong in the DMZ? (Select TWO).
Options
- AFinance servers
- BBackup servers
- CWeb servers
- DSMTP gateways
- ELaptops
How the community answered
(21 responses)- A5% (1)
- C90% (19)
- E5% (1)
Why each option
The DMZ hosts publicly accessible services that need exposure to the internet while remaining separated from the internal network, making web servers and SMTP gateways the correct choices.
Finance servers contain highly sensitive internal data and must reside entirely within the protected internal network, never in a zone exposed to internet traffic.
Backup servers store critical organizational data and should reside in the secure internal network, not in a semi-trusted DMZ zone accessible from the internet.
Web servers must be accessible from the public internet to serve external users, making the DMZ the appropriate placement - they are separated from the internal network by a firewall to contain any compromise.
SMTP gateways relay inbound and outbound email between the internet and internal mail servers, requiring an internet-facing position in the DMZ to filter and forward mail without exposing internal mail infrastructure.
Laptops are endpoint user devices that connect to the internal network and have no reason to be placed in the DMZ.
Concept tested: Services appropriate for DMZ placement
Source: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/dmz/secure-vnet-dmz
Topics
Community Discussion
No community discussion yet for this question.