SY0-301 · Question #864
Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?
The correct answer is C. DMZ. A DMZ (Demilitarized Zone) is a network segment that sits between the untrusted Internet and the trusted internal corporate network. Public-facing servers (web servers, mail servers, DNS) are placed in the DMZ so that if they are compromised, attackers cannot directly reach the…
Question
Which of the following must a security administrator implement to isolate public facing servers from both the corporate network and the Internet?
Options
- ANAC
- BIPSec
- CDMZ
- DNAT
How the community answered
(39 responses)- A3% (1)
- B3% (1)
- C87% (34)
- D8% (3)
Explanation
A DMZ (Demilitarized Zone) is a network segment that sits between the untrusted Internet and the trusted internal corporate network. Public-facing servers (web servers, mail servers, DNS) are placed in the DMZ so that if they are compromised, attackers cannot directly reach the internal network. Firewalls on both sides control traffic in and out of the DMZ. NAC (Network Access Control) enforces endpoint compliance policies. IPSec is a VPN/encryption protocol. NAT (Network Address Translation) maps private IP addresses to public ones but does not create network isolation. Only a DMZ architecturally isolates servers from both the Internet and the corporate network simultaneously.
Topics
Community Discussion
No community discussion yet for this question.