ITPEC FE Morning October 2020 Question 42
ITPEC FE Morning October 2020 — Question 42 of 80
DMZ Architecture — place public-facing servers in DMZ, sensitive data servers in the internal segment.
A network is divided into three segments by a firewall: external, DMZ, and internal. A web server and a database server need to be deployed securely.
Correct placement:
- Web server → DMZ (must be reachable from the Internet)
- Database server → internal segment (contains important data, must be protected)
Why not others:
- (a) Both in internal — web server becomes unreachable from the Internet
- (b) Both in DMZ — database with important data is exposed in a semi-public zone
- (d) Web server in external segment — no firewall protection at all; database in DMZ — still too exposed
Key rule: DMZ is a buffer zone for Internet-facing services. Critical data (databases) always goes behind the firewall in the internal segment.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.