Exam N10-008 topic 1 question 496 discussion

Actual exam question from CompTIA's N10-008

Question #: 496
Topic #: 1

An engineer is designing a network topology for a company that maintains a large on-premises private cloud. A design requirement mandates internet-facing hosts to be partitioned off from the internal LAN and internal server IP ranges. Which of the following defense strategies helps meet this requirement?

A. Implementing a screened subnet
B. Deploying a honeypot
C. Utilizing network access control
D. Enforcing a Zero Trust model

Show Suggested Answer

Suggested Answer: A 🗳️

by S5Networking at July 14, 2023, 3:23 a.m.

Comments

Submit Cancel

Hchfyvggjg

Highly Voted 11 months, 2 weeks ago

Selected Answer: A

A. Implementing a screened subnet Implementing a screened subnet, also known as a "DMZ" (Demilitarized Zone), involves creating a separate network segment that acts as an intermediary zone between the internal network and the external (Internet-facing) network. Internet-facing hosts are placed in the DMZ, providing controlled access to services like web servers or email servers, while keeping them separate from the internal LAN and critical server IP ranges. This helps mitigate the risk of external attacks directly affecting internal systems. The other options do not directly address the requirement of partitioning off internet-facing hosts

upvoted 5 times

...

S5Networking

Most Recent 1 year ago

It is A

upvoted 2 times

...