ITPEC FE Morning April 2022 Question 44

Source exam: ITPEC FE Morning April 2022Topic: Security

ITPEC FE Morning April 2022 — Question 44 of 80

DMZ Server Placement — protect critical data by separating web and database servers across network segments.

Three-segment network: external → DMZ → internal, separated by a firewall.

  • Web server → placed in DMZ (needs to accept Internet requests)
  • Database server → placed in internal segment (holds critical data, must be shielded)

Why this arrangement:
- DMZ acts as a buffer zone — Internet users can reach the web server, but not the internal network directly

- The web server forwards DB queries to the internal segment through the firewall

- Direct communication between external and internal segments is blocked

Why not others:
- (a) Both in DMZ — database with critical data is too exposed

- (b) Both in internal — web server becomes unreachable from the Internet

- (d) Web in external, DB in DMZ — web server has no firewall protection, DB is insufficiently protected

Key rule: Public-facing servers (web, mail, DNS) go in the DMZ; data stores (DB, file servers) go in the internal segment.

AI-generated — may contain errors

The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.