Refer to the exhibit.

Which two steps mitigate attacks on the webserver from the Internet? (Choose two.)
Suggested Answer: B, D
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
JO
Jordan
10 months ago
ACLs are a must, but I’d go with B and C instead.
ER
Eric
10 months ago
B is a solid choice, but A seems too restrictive.
ME
Melita
10 months ago
Definitely B and D! Proxy servers are key.
MI
Mitzie
11 months ago
I think A is important too, but not sure about D.
JE
Jerilyn
11 months ago
Wait, moving the webserver to the internal network? That sounds risky!
HU
Hubert
11 months ago
I vaguely recall something about allowing only external connections, but I can't remember if that's a good strategy for this scenario.
GE
Gertude
11 months ago
Moving the webserver to the internal network seems risky; I feel like it might expose it to other vulnerabilities.
PA
Paris
11 months ago
I think implementing a proxy server in the DMZ could definitely help mitigate attacks, similar to a practice question we did last week.
BR
Brittani
12 months ago
I remember studying about using ACLs to restrict traffic, but I'm not sure if allowing only TLS 1.3 is the best option here.
CO
Cory
12 months ago
This is a classic network security question. I'm confident I can select the two best mitigation steps based on the information provided.
HA
Harley
1 year ago
I think A and B are the right answers here. Creating an ACL for TLS 1.3 and implementing a proxy server in the DMZ should provide good protection.
VI
Vicente
1 year ago
I'm leaning towards options B and D, but I want to double-check the details in the exhibit to be sure.
DE
Demetra
1 year ago
Okay, let's think this through step-by-step. The key is to identify the two best ways to mitigate attacks from the internet on the webserver.
EA
Earleen
1 year ago
This question seems straightforward, but I want to make sure I understand the context correctly before answering.
FI
Filiberto
1 year ago
Haha, Arleen, you're a hacker at heart, aren't you? But seriously, B and D are the real deal. Don't mess with the DMZ, my friend.
SH
Shad
1 year ago
Yeah, we definitely don't want to mess with the DMZ. B and D it is.
CH
Chandra
1 year ago
I know, right? B and D are the way to go to protect the webserver.
AR
Arleen
1 year ago
Hey, what about option A? TLS 1.3 is the latest and greatest, shouldn't we be using that for security? *wink wink*
DI
Dick
1 year ago
I agree, B and D are the way to go. Gotta keep that web server away from the big bad internet!
MI
Mitsue
1 year ago
User4: Agreed, both options B and D can help mitigate attacks.
WA
Wai
1 year ago
User3: Moving the webserver to the internal network is also important.
HE
Herman
1 year ago
User2: Yeah, having a proxy server in the DMZ network can help.
VE
Vesta
1 year ago
User1: I think option B is a good idea.
LO
Loreta
1 year ago
I'm not sure about option C. It might still leave the webserver vulnerable.
JA
Jamal
1 year ago
I agree with Joanna. TLS 1.3 and a proxy server can help secure the webserver.
JO
Joanna
1 year ago
I think option A and B are the best choices.
KA
Karl
1 year ago
B and D seem like the best options to me. Putting the web server in the DMZ and using a proxy server should help protect it from direct internet attacks.
NA
Nan
1 year ago
Creating an ACL on the firewall to allow only TLS 1.3 is also a good measure to mitigate attacks.
JO
Joni
1 year ago
Moving the webserver to the internal network can also help protect it from direct internet attacks.
SH
Sherita
1 year ago
I agree, using a proxy server in the DMZ can add an extra layer of security.