A security architect is designing a jump box administrative access path for a high-security internal database zone. Arrange the sequence of network traffic flows and security enforcement controls in the correct order, starting from the administrator's initial remote connection attempt and ending at the destination database server.
- 1The administrator initiates an encrypted administrative session from an external client that passes through the perimeter edge firewall to reach the bastion host in the management DMZ.
- 2The bastion host validates multi-factor authentication and context-based access rules before establishing an interactive management workstation session.
- 3The bastion host initiates a new, separate egress connection through the internal firewall targeting the database network segment.
- 4The internal next-generation firewall applies microsegmentation policies to confirm the traffic originates solely from the designated bastion IP before granting access to the database server.
Cevap
The correct sequence starts with external traffic entering the perimeter DMZ to contact the bastion host, followed by multi-factor authentication on the bastion host, then initiating a separate internal connection from the bastion host, and finally passing internal firewall microsegmentation checks to access the database server.
Secure network administrative access relies on a multi-tier defense-in-depth sequence: traffic first enters the management DMZ via the perimeter firewall, requires strong authentication on the jump box, originates a brand-new internal session from the jump box, and is strictly filtered by internal firewall microsegmentation rules before touching sensitive internal assets.
Adım Adım Çözüm
Anahtar Kavram
Secure Network Transit & Bastion Architecture