Exam 312-50v11 All Questions

View all questions & answers for the 312-50v11 exam

Exam 312-50v11 topic 1 question 125 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 125
Topic #: 1

Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have direct internet access, and block the access to workstations. Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the case of TPNQM SA.
In this context, what can you say?

A. Bob can be right since DMZ does not make sense when combined with stateless firewalls
B. Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one
C. Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations
D. Bob is partially right. DMZ does not make sense when a stateless firewall is available

Show Suggested Answer

Suggested Answer: C 🗳️

by ANDRESCB1988 at July 23, 2021, 5:47 a.m.

Comments

Submit Cancel

M4E_55

Highly Voted 3 years, 10 months ago

Bob needs to find a new job soon. Correct answer C

upvoted 76 times

WillyWallace333

1 year, 7 months ago

CORRECT, LOL

upvoted 1 times

...

Snipa_x

3 years, 6 months ago

Lmaoo....

upvoted 3 times

...

king777

2 years, 9 months ago

🤣.........

upvoted 2 times

...

YourFriendlyNeighborhoodSpider

1 year, 6 months ago

hahaha

upvoted 1 times

...

Nagato

Highly Voted 3 years, 9 months ago

Bob probably got his certification using only the dumps. You see the irony here.

upvoted 51 times

CanORage

3 years, 8 months ago

Lol, brilliant comment

upvoted 5 times

...

blehbleh

Most Recent 6 months ago

Selected Answer: C

If C is not the correct answer on the test then Ec council needs to be shut down.

upvoted 1 times

...

DataTraveler

1 year, 8 months ago

Selected Answer: B

"Create a fixed mapping from internal addresses to externally visible addresses but use a port mapping so that multiple internal machines use the same external address." p. 1507/1491

upvoted 1 times

...

victorfs

2 years ago

Selected Answer: B

The correct option is B. Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one

upvoted 2 times

...

victorfs

2 years, 1 month ago

Selected Answer: B

The correcto option is B; Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one." CEH chapter9, Perimeter Defense Mechanisms

upvoted 2 times

...

CyberMalware

2 years, 2 months ago

Selected Answer: C

C is correct

upvoted 1 times

...

Shin_Frankie

2 years, 3 months ago

Selected Answer: C

DMZ seprates network

upvoted 1 times

...

karloska2015

2 years, 7 months ago

Correct answer is C ...

upvoted 1 times

...

jartavia05

2 years, 7 months ago

Selected Answer: C

A DMZ is always relevant when it comes to protecting a internal network. With DMZ bob can also prevent lateral movement on public internet servers.

upvoted 4 times

...

TroyMcLure

2 years, 9 months ago

Selected Answer: C

The official answer needs to be fixed ASAP.

upvoted 5 times

...

Escltn

2 years, 9 months ago

Selected Answer: C

A DMZ is always relevant when it comes to protecting a internal network

upvoted 2 times

...

Mileke

3 years ago

Selected Answer: C

Correct answer is C

upvoted 2 times

...

cazzobsb

3 years, 2 months ago

Selected Answer: C

Correct.

upvoted 2 times

...

LexxxD

3 years, 2 months ago

Selected Answer: C

Correct answer in the use case should be C. Even if there is a logic behind removing a DMZ it should not be done in general. There is never enough protection.

upvoted 3 times

...

semselim

3 years, 3 months ago

Selected Answer: B

Correct answer B

upvoted 2 times

...

cozy1970

3 years, 4 months ago

Bob can not prevent lateral movement. C is correct.

upvoted 3 times

...

Load full discussion...