Examkin

Soru

Zorluk: KolaySecure Network Design and Segmentation

An administrator is designing a multi-tiered secure network path to allow external management traffic to reach a critical database server. Arrange the network segments in the correct order that incoming administration traffic must traverse, starting from the least secure network segment to the most secure network segment.

  1. 1External Management Network
  2. 2Perimeter Screened Subnet (DMZ)
  3. 3Internal Application Zone
  4. 4Restricted Database Segment

Cevap

Management traffic flows sequentially from the External Management Network, through the Perimeter Screened Subnet (DMZ), into the Internal Application Zone, and finally terminates at the Restricted Database Segment.
Secure network design relies on defense-in-depth by enforcing strict zone boundaries. Traffic originating from an untrusted external network must first pass through a screened subnet (DMZ) hosting jump boxes, transition through internal application tiers, and finally reach the restricted database segment, moving sequentially from the least secure to the most secure zone.

Adım Adım Çözüm

1
Identify the origin point of the traffic flow.
The External Management Network is identified as position 1.
External networks lack perimeter controls and represent the untrusted starting point.
2
Identify the initial perimeter security boundary.
Traffic transitions to the Perimeter Screened Subnet (DMZ) as position 2.
Bastion hosts in the DMZ authenticate and inspect incoming sessions before granting access to internal zones.
3
Determine the next internal layer in the zone hierarchy.
Traffic enters the Internal Application Zone as position 3.
Internal application tiers reside behind perimeter firewalls within the trusted enterprise boundary.
4
Identify the most isolated internal enclave.
Traffic terminates at the Restricted Database Segment as position 4.
Databases require maximum defense-in-depth protection and are placed in the innermost restricted tier.

Anahtar Kavram

Defense-in-depth network zoning and transit ordering
Bu soruyu puanla

Konular

Secure Network Design and Segmentation

Bu konudan daha fazla soru