Examkin

Question

Difficulty: EasySecure Network Design and Segmentation

A security administrator is documenting the secure network transit path for a remote system administrator to access a sensitive internal database server via a bastion host. Arrange the following network zones in order from the initial connection point (least secure/untrusted external) to the final destination (most secure internal target).

  1. 1External Public Internet
  2. 2Perimeter Screened Subnet (DMZ)
  3. 3Bastion Host Management Subnet
  4. 4Isolated Backend Database Zone

Answer

The correct network path order from external origin to secure target is: External Public Internet, Perimeter Screened Subnet (DMZ), Bastion Host Management Subnet, and Isolated Backend Database Zone.
The proper administrative connection flow follows defense-in-depth segmentation principles: the remote session starts on the untrusted External Public Internet, enters the Perimeter Screened Subnet (DMZ), authenticates at the Bastion Host Management Subnet, and finally proxies through to the Isolated Backend Database Zone.

Step-by-Step Solution

1
Identify the origin of the remote traffic flow.
The connection starts on the External Public Internet.
Remote administrative requests originate outside the enterprise network boundary.
2
Determine the external boundary entry point.
Traffic enters the Perimeter Screened Subnet (DMZ).
External requests must pass through perimeter security controls before reaching internal management components.
3
Identify the intermediary administrative proxy host zone.
Traffic reaches the Bastion Host Management Subnet.
Secure network architecture mandates terminating administrative sessions on an isolated jump box rather than allowing direct access to backend servers.
4
Identify the final protected target network zone.
The session completes at the Isolated Backend Database Zone.
The database subnet is completely isolated from the internet and accepts connections only from authenticated bastion hosts.

Key Concept

Bastion Host Jump Box and Network Zone Transit Sequence
Estimated Time:45s
Rate this question

Topics

Secure Network Design and Segmentation

More questions from this topic