100-160 Question 82
Select 2An organization is setting up a web application that requires secure access for external users. To minimize the attack surface and detect potential intrusions, which combination of components should the organization prioritize deploying?
- A
A demilitarized zone (DMZ) to isolate the web application from the internal network
- B
A honeypot to attract and analyze malicious traffic
- C
An intrusion detection system (IDS) to monitor and alert on suspicious activity
- D
A virtualization platform to host the web application for scalability
- E
A proxy server to cache and filter web traffic
Show answer and explanation
Correct answers: A, C
Explanation
To secure a web application, deploying a DMZ helps isolate the application from the internal network, reducing the risk of broader network compromise. An IDS complements this by monitoring traffic and alerting on potential malicious activity. While other components like honeypots, proxies, and virtualization platforms have their purposes, they are not as critical for this specific scenario.
- A. Correct.
A DMZ is a critical component for hosting externally accessible services, such as a web application, while isolating it from the internal network to minimize the attack surface.
- B. Incorrect.
A honeypot is designed to attract attackers and analyze their behavior, but it is not a primary security measure for protecting a web application.
- C. Correct.
An IDS monitors network traffic for suspicious activity and provides alerts, making it useful for detecting potential intrusions into the web application.
- D. Incorrect.
A virtualization platform offers scalability and resource optimization but is not directly related to reducing the attack surface or detecting intrusions.
- E. Incorrect.
A proxy server helps with caching and filtering traffic but does not directly address the isolation of the application or detection of intrusions.