What logical area is Larry putting the new email server into?

Larry is responsible for the company’s network consisting of 300 workstations and 25 servers. After using a hosted email service for a year, the company wants to control the email internally. Larry likes this idea because it will give him more control over the email. Larry wants to purchase a server for email but does not want the server to be on the internal network due to the potential to cause security risks. He decides to place the server outside of the company’s internal firewall. There is another firewall connected directly to the Internet that will protect traffic from accessing the email server. The server will be placed between the two firewalls.

What logical area is Larry putting the new email server into?
A . He is going to place the server in a Demilitarized Zone (DMZ)
B . He will put the email server in an IPsec zone.
C . Larry is going to put the email server in a hot-server zone.
D . For security reasons, Larry is going to place the email server in the company’s Logical Buffer Zone (LBZ).

View Answer

Answer: A

Explanation:

Larry is placing the new email server in a Demilitarized Zone (DMZ). A DMZ is a physical or logical subnetwork that contains and exposes an organization’s external-facing services to an untrusted network, usually the internet. The purpose of a DMZ is to add an additional layer of security to an organization’s local area network (LAN); an external attacker only has access to equipment in the DMZ, rather than any other part of the network. The email server placed in the DMZ can be accessed from the internet, but it does not have direct access to the internal network, which reduces the risk of an internal security breach if the email server is compromised.

Reference: The concept of a DMZ is covered in the EC-Council’s Certified Network Defender (C|ND) program, which teaches network administrators how to secure their networks against threats. The C|ND program includes strategies for protecting network infrastructure and creating secure architectures, which involves the use of DMZs123.