ISC2 Certified in Cybersecurity (CC)Network SecurityMedium
A security team is designing a network architecture for a new data center. They want to implement a highly available and secure perimeter that allows public access to web servers while strictly protecting internal databases. The design includes redundant firewalls and routers, placing the web servers in a neutral zone, and isolating internal resources. What specific network topology concept are they primarily applying?
- ABus topology
- BDemilitarized Zone (DMZ)
- CRing topology
- DStar topology
Show answer & explanationAnswer & explanation
Correct answer: B. Demilitarized Zone (DMZ)
A DMZ is a neutral zone, typically between two firewalls, used to host public-facing services like web servers, protecting the internal network from direct access.
Why the other options are wrong
- A. Bus topology is a physical layout where all nodes are connected to a single cable.
- C. Ring topology is a physical layout where devices are connected in a circular fashion.
- D. Star topology is a physical layout where all nodes connect to a central hub/switch.
Demilitarized Zone (DMZ)
A physical or logical subnetwork that separates an organization's local area network (LAN) from an untrusted network, usually the internet.
- Provides an additional layer of security for the internal network.
- Hosts public-facing servers (e.g., web, email, DNS).
- Typically located between two firewalls (a screened subnet DMZ).
Memory trick: DMZ Defends, Firewalls Filter, Routers Route, IDS Detects.