Exam 312-50v11 topic 1 question 25 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 25
Topic #: 1

A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server. Based on this information, what should be one of your key recommendations to the bank?

A. Place a front-end web server in a demilitarized zone that only handles external web traffic
B. Require all employees to change their anti-virus program with a new one
C. Move the financial data to another server on the same IP subnet
D. Issue new certificates to the web servers from the root certificate authority

Show Suggested Answer

Suggested Answer: A 🗳️

by beowolf at June 15, 2021, 3:17 a.m.

Comments

Submit Cancel

Daniel8660

Highly Voted 1 year, 9 months ago

Selected Answer: A

Demilitarized Zone (DMZ) The DMZ is a network that serves as a buffer between the internal secure network and the insecure Internet. (P.1492/1476)

upvoted 5 times

...

BigMomma4752

Highly Voted 2 years, 10 months ago

Answer A is correct and the best choice.

upvoted 5 times

...

Beekay52

Most Recent 9 months, 2 weeks ago

This question does not state whether its an internal based or external based breach. DMZ might be useless if its internal based attack.

upvoted 1 times

...

Steve46

9 months, 4 weeks ago

I hate this question as they never state whether the data breach was external or internal. If an insider exploited an individual server, then what value would a DMZ had been?

upvoted 1 times

...

qovert

1 year, 3 months ago

Answer A. By placing a front-end web server in a demilitarized zone (DMZ), you can create a separate network segment that is exposed to the internet, while keeping the internal network (where sensitive data resides) more secure. This approach reduces the risk of a single compromised server leading to a data breach, as it adds an additional layer of security between the external web traffic and the internal network containing sensitive financial data.

upvoted 1 times

...

willoutte

1 year, 9 months ago

3 tier app adds security (front-middle-back)

upvoted 2 times

...

beowolf

3 years ago

is this answer correct?

upvoted 2 times

ANDRESCB1988

3 years ago

es correcto, crear una DMZ y poner los servidores que se exponen a internet ahi

upvoted 3 times

...