A network security administrator is setting up access rules for an enterprise environment to ensure strict isolation between public web servers and internal databases, while also maintaining secure remote administrative access. Which TWO network architecture and segmentation practices should the administrator implement to meet these requirements?
- Place the public-facing web servers inside a Demilitarized Zone (DMZ) to restrict direct traffic to the internal network.Answer
- Deploy a jump box (bastion host) to proxy and audit administrative management traffic into sensitive network segments.Answer
- CPlace the internal databases in the same subnet as the public web servers to minimize traffic route hops.
- DDisable internal firewall inspection between zones under the assumption that all internal network traffic is inherently secure.
Answer
The network security administrator should deploy public web servers inside a Demilitarized Zone (DMZ) and use a jump box (bastion host) to proxy administrative traffic.
Placing public web servers within a DMZ ensures inbound internet traffic is isolated from the private internal network. Using a jump box secures management sessions by funneling administrator access through a single hardened access control point.
Step-by-Step Solution
Key Concept
Demilitarized Zone (DMZ) isolation and Jump Box access control in secure network design