ITPEC FE Morning April 2022 Question 44
ITPEC FE Morning April 2022 — Question 44 of 80
DMZ Server Placement — protect critical data by separating web and database servers across network segments.
Three-segment network: external → DMZ → internal, separated by a firewall.
- •Web server → placed in DMZ (needs to accept Internet requests)
- •Database server → placed in internal segment (holds critical data, must be shielded)
Why this arrangement:
- DMZ acts as a buffer zone — Internet users can reach the web server, but not the internal network directly
- The web server forwards DB queries to the internal segment through the firewall
- Direct communication between external and internal segments is blocked
Why not others:
- (a) Both in DMZ — database with critical data is too exposed
- (b) Both in internal — web server becomes unreachable from the Internet
- (d) Web in external, DB in DMZ — web server has no firewall protection, DB is insufficiently protected
Key rule: Public-facing servers (web, mail, DNS) go in the DMZ; data stores (DB, file servers) go in the internal segment.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.