A network security team is establishing security zones and access control mechanisms for an enterprise environment. Match each network segmentation strategy on the left to its primary application scenario on the right.
- Air GapPhysically isolating high-security systems completely from external and public networks.
- DMZ (Demilitarized Zone)Hosting internet-accessible services while restricting direct traffic into the internal corporate network.
- MicrosegmentationApplying granular security controls to isolate individual virtual workloads within a cloud or data center environment.
- Jump BoxServing as a single hardened access point for administrative connections to protected network segments.
Answer
Air Gap matches complete physical isolation from external networks; DMZ matches hosting internet-accessible services while buffering internal networks; Microsegmentation matches granular isolation of individual virtual workloads; Jump Box matches serving as a hardened administrative entry point.
Air gaps completely physically separate high-security networks from external connections. DMZs host public-facing services to isolate the internal network from internet threats. Microsegmentation applies granular policy controls between individual virtualized workloads. Jump boxes serve as single hardened entry points for administrative traffic accessing sensitive zones.
Step-by-Step Solution
Key Concept
Secure Network Design and Segmentation Strategies
Estimated Time:1m 0s