Examkin

Soru

Zorluk: KolaySecure Network Design and Segmentation

A security administrator is documenting the secure network transit path for a remote system administrator to access a sensitive internal database server via a bastion host. Arrange the following network zones in order from the initial connection point (least secure/untrusted external) to the final destination (most secure internal target).

  1. 1External Public Internet
  2. 2Perimeter Screened Subnet (DMZ)
  3. 3Bastion Host Management Subnet
  4. 4Isolated Backend Database Zone

Cevap

The correct network path order from external origin to secure target is: External Public Internet, Perimeter Screened Subnet (DMZ), Bastion Host Management Subnet, and Isolated Backend Database Zone.
The proper administrative connection flow follows defense-in-depth segmentation principles: the remote session starts on the untrusted External Public Internet, enters the Perimeter Screened Subnet (DMZ), authenticates at the Bastion Host Management Subnet, and finally proxies through to the Isolated Backend Database Zone.

Adım Adım Çözüm

1
Identify the origin of the remote traffic flow.
The connection starts on the External Public Internet.
Remote administrative requests originate outside the enterprise network boundary.
2
Determine the external boundary entry point.
Traffic enters the Perimeter Screened Subnet (DMZ).
External requests must pass through perimeter security controls before reaching internal management components.
3
Identify the intermediary administrative proxy host zone.
Traffic reaches the Bastion Host Management Subnet.
Secure network architecture mandates terminating administrative sessions on an isolated jump box rather than allowing direct access to backend servers.
4
Identify the final protected target network zone.
The session completes at the Isolated Backend Database Zone.
The database subnet is completely isolated from the internet and accepts connections only from authenticated bastion hosts.

Anahtar Kavram

Bastion Host Jump Box and Network Zone Transit Sequence
Tahmini Süre:45s
Bu soruyu puanla

Konular

Secure Network Design and Segmentation

Bu konudan daha fazla soru