DMZ Network Segmentation & Security Quiz

1. In a DMZ, which of the following should be implemented to control traffic between zones?

Access control lists (ACLs)

Virtual private networks (VPNs)

Load balancers

Proxy servers

Submit

3. Which of the following protocols should be restricted or disabled in the DMZ? (Select all that apply)

Telnet

SNMP without authentication

SSH

Unencrypted FTP

HTTPS

Submit

4. In a DMZ, what should happen if a compromise is detected on a DMZ server?

Immediately restore from backup without investigation

Isolate the server and conduct forensic analysis

Ignore it if the internal network is protected

Notify only the external users

5. Which logging and monitoring approach is critical for DMZ security?

No logging to reduce storage costs

Centralized logging to a secure internal server

Logging only on external firewalls

Logging to the DMZ servers themselves

6. True or False: All servers in a DMZ should have the same security configuration.

True

False

Submit

8. What does a reverse proxy in the DMZ accomplish for security?

It hides internal server IP addresses from external users

It increases network speed

It eliminates the need for firewalls

It allows unrestricted access to internal systems

9. Which of the following are best practices for DMZ configuration? (Select all that apply)

Regularly patch and update DMZ servers

Use strong authentication mechanisms

Disable logging on DMZ systems

Implement host-based firewalls

Allow bidirectional traffic without restrictions

Submit

10. True or False: A DMZ eliminates the need for intrusion detection systems.

True

False

11. What is the primary purpose of a demilitarized zone (DMZ) in network architecture?

To isolate public-facing servers from the internal network

To increase network bandwidth for external users

To eliminate the need for firewalls

To provide direct internet access to all internal systems

Submit

13. Which protocol should be used for secure administrative access to DMZ servers?

Telnet

SSH

FTP

HTTP

14. True or False: Internal users should have unrestricted access to all DMZ resources.

True

False

Submit

16. What is the recommended firewall rule for outbound traffic from the DMZ to the internet?

Allow all outbound traffic

Block all outbound traffic

Allow only necessary services based on application requirements

Allow only HTTP and HTTPS

17. Which of the following services are typically placed in a DMZ? (Select all that apply)

Web servers

Mail servers

Active Directory domain controllers

DNS servers

Database servers with sensitive data

Submit

18. True or False: A DMZ requires only one firewall for adequate security.

True

False

19. In a DMZ, what type of traffic should be allowed from the internet to internal systems?

All traffic without restrictions

Only specific services on DMZ servers

Direct SSH and RDP connections

Unrestricted access to databases

20. Which network topology is most commonly used to implement a DMZ?

Star topology

Dual-firewall architecture

Mesh topology

Bus topology

Network Security Engineer Setting Up a DMZ Segment Quiz

1. In a DMZ, which of the following should be implemented to control traffic between zones?

2.

What first name or nickname would you like us to use?

2. A _____ approach to security ensures that even if the DMZ is compromised, internal systems remain protected.

3. Which of the following protocols should be restricted or disabled in the DMZ? (Select all that apply)

4. In a DMZ, what should happen if a compromise is detected on a DMZ server?

5. Which logging and monitoring approach is critical for DMZ security?

6. True or False: All servers in a DMZ should have the same security configuration.

7. A _____ is a security device placed between the internet and the DMZ to filter traffic.

8. What does a reverse proxy in the DMZ accomplish for security?

9. Which of the following are best practices for DMZ configuration? (Select all that apply)

10. True or False: A DMZ eliminates the need for intrusion detection systems.

11. What is the primary purpose of a demilitarized zone (DMZ) in network architecture?

12. What is network _____, and why is it important in DMZ design?

13. Which protocol should be used for secure administrative access to DMZ servers?

14. True or False: Internal users should have unrestricted access to all DMZ resources.

15. A _____ is a monitoring system placed in the DMZ to detect and alert on suspicious traffic patterns.

16. What is the recommended firewall rule for outbound traffic from the DMZ to the internet?

17. Which of the following services are typically placed in a DMZ? (Select all that apply)

18. True or False: A DMZ requires only one firewall for adequate security.

19. In a DMZ, what type of traffic should be allowed from the internet to internal systems?

20. Which network topology is most commonly used to implement a DMZ?