100-160 Question 85
Select 3A company is designing a network security architecture for its hybrid environment that includes an on-premises data center and a cloud platform. They need to protect their public-facing web servers while also monitoring and responding to potential threats in real-time. Which combination of technologies would best meet these requirements?
- A
Deploy a Demilitarized Zone (DMZ) to isolate public-facing web servers from the internal network
- B
Implement an Intrusion Detection System (IDS) to monitor suspicious traffic and generate alerts
- C
Use a honeypot to divert and analyze malicious traffic targeting the web servers
- D
Set up a proxy server to encrypt traffic between the web servers and clients
- E
Implement an Intrusion Prevention System (IPS) to actively block malicious traffic targeting sensitive systems
Show answer and explanation
Correct answers: A, B, E
Explanation
To secure public-facing web servers in a hybrid environment, a DMZ is used to isolate them from the internal network, reducing the risk of lateral attacks. An IDS helps monitor for suspicious activities and generates alerts for potential threats, while an IPS actively blocks identified malicious traffic, providing real-time threat mitigation. Combined, these technologies ensure robust protection and monitoring for both the public-facing services and the internal network.
- A. Correct.
A DMZ is an essential part of network security architecture for public-facing services, as it isolates these services from the internal network, reducing the risk of lateral movement by attackers.
- B. Correct.
An IDS is crucial for monitoring network traffic and identifying potential threats by generating alerts for suspicious activity, allowing security teams to respond quickly.
- C. Incorrect.
While a honeypot can provide valuable insights into attacker behavior, it is not a primary mechanism for protecting active public-facing servers and may not directly prevent or detect threats in real time.
- D. Incorrect.
A proxy server can help with encryption and caching, but it is not primarily designed to secure or monitor traffic for potential intrusions or attacks.
- E. Correct.
An IPS actively blocks malicious traffic, making it a key component for protecting sensitive systems and responding to threats in real-time.