New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-38 Exam - Topic 5 Question 84 Discussion

Actual exam question for Eccouncil's 312-38 exam
Question #: 84
Topic #: 5
[All 312-38 Questions]

A network designer needs to submit a proposal for a company, which has just published a web

portal for its clients on the internet. Such a server needs to be isolated from the internal network,

placing itself in a DMZ. Faced with this need, the designer will present a proposal for a firewall with

three interfaces, one for the internet network, another for the DMZ server farm and another for the

internal network. What kind of topology will the designer propose?

Show Suggested Answer Hide Answer
Suggested Answer: A

The topology that the network designer will propose is known as a screened subnet. This topology involves the use of two or more firewalls to create a network segment referred to as a demilitarized zone (DMZ). The DMZ acts as a buffer zone between the public internet and the internal network. It contains the public-facing servers, such as the web portal mentioned, which is isolated from the internal network for added security. The screened subnet topology typically includes a firewall at the network's edge connected to the internet, another firewall separating the DMZ from the internal network, and the DMZ itself. This setup allows for strict control of traffic between the internet, the DMZ, and the internal network, providing an additional layer of security.


by Francis at May 28, 2024, 05:22 PM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Micheal
3 months ago
Not sure about that, I thought bastion hosts were outdated.
upvoted 0 times
...
Audry
3 months ago
Agreed, DMZ is crucial for security!
upvoted 0 times
...
Samuel
3 months ago
Wait, is a bastion host really enough for this setup?
upvoted 0 times
...
Eun
4 months ago
I think a multi-homed firewall makes more sense here.
upvoted 0 times
...
Ashton
4 months ago
Definitely a screened subnet!
upvoted 0 times
...
Jessenia
4 months ago
I keep mixing up bastion host and screened subnet; I hope I remember the differences during the exam!
upvoted 0 times
...
Della
4 months ago
I practiced a similar question, and I think the DMZ, External-Internal firewall option makes sense for this scenario.
upvoted 0 times
...
Tamar
4 months ago
I'm not entirely sure, but I feel like the multi-homed firewall might be a good option too since it has multiple interfaces.
upvoted 0 times
...
Juan
5 months ago
I remember studying about DMZ setups, and I think the screened subnet is the right choice for isolating the server.
upvoted 0 times
...
Lauran
5 months ago
I'm not entirely sure about this one. The question mentions three interfaces on the firewall, which makes me think a multi-homed firewall could be a valid option. But I'll need to double-check the definitions to be confident in my answer.
upvoted 0 times
...
Rolande
5 months ago
Okay, I've got this. The designer needs to propose a topology that separates the public-facing web server from the internal network. Based on the details provided, the answer is clearly a DMZ with an external-internal firewall.
upvoted 0 times
...
Johnna
5 months ago
Hmm, I'm a bit confused about the different firewall options here. I'll need to review my notes on network security architectures to make sure I understand the differences between a screened subnet, DMZ, and multi-homed firewall.
upvoted 0 times
...
Larae
5 months ago
This seems like a straightforward firewall topology question. I think the key is understanding the concept of a DMZ and how it isolates the public-facing web server from the internal network.
upvoted 0 times
...
Galen
5 months ago
Hmm, I'm a bit unsure about this one. I think the asynchronous jobs and timeout settings are the way to go, but I want to make sure I fully understand how those work in this context. Might need to review some notes before answering.
upvoted 0 times
...
Justine
5 months ago
Hmm, I'm a bit confused by the information given. I'll need to double-check the formulas and make sure I understand how to apply them correctly for this scenario.
upvoted 0 times
...
Vanda
5 months ago
I think configuration management includes things like status accounting and version identification, but I'm not sure about that auditing part.
upvoted 0 times
...

Save Cancel