DMZ architecture in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a DMZ in network security?

A DMZ (Demilitarized Zone) is a separate network area that sits between an internal network and an external network, like the internet. It adds an extra layer of security by isolating public-facing services from the internal network.

beginner

Why is a DMZ used in network architecture?

A DMZ is used to protect the internal network by hosting public services (like web servers) in a separate zone. This way, if attackers compromise the DMZ, they still cannot directly access the internal network.

intermediate

Name two common devices used to create a DMZ.

Firewalls and routers are commonly used to create and control access to a DMZ. Firewalls enforce rules to allow or block traffic between the internet, DMZ, and internal network.

beginner

What kind of services are typically placed in a DMZ?

Services that need to be accessible from the internet, such as web servers, email servers, and DNS servers, are typically placed in the DMZ to protect the internal network.

intermediate

How does a DMZ improve security compared to directly exposing internal servers?

By placing public servers in the DMZ, the internal network is shielded. Even if a DMZ server is hacked, attackers face another firewall before reaching sensitive internal systems, reducing risk.

What does DMZ stand for in cybersecurity?

A Digital Media Zone

B Data Management Zone

C Demilitarized Zone

D Direct Management Zone

DMZ stands for Demilitarized Zone, a network area that separates internal and external networks.

Which device is primarily used to control traffic between the DMZ and internal network?

A Firewall

B Switch

C Access Point

D Modem

Firewalls enforce security rules controlling traffic between the DMZ and internal network.

Why are public servers placed in a DMZ?

A To protect internal network from direct exposure

B To improve internet speed

C To reduce server costs

D To allow unrestricted access to internal data

Public servers in a DMZ protect the internal network by isolating them from direct internet access.

Which of the following is NOT typically placed in a DMZ?

A Web server

B Internal database server

C Email server

D DNS server

Internal database servers are usually kept inside the protected internal network, not in the DMZ.

What is the main security benefit of using a DMZ?

A Allows all traffic without restrictions

B Simplifies network design

C Faster internet connection

D Adds an extra layer of protection between internet and internal network

A DMZ adds an extra layer of security by isolating public services from the internal network.

Explain what a DMZ is and why it is important in network security.

Think about how a DMZ acts like a buffer zone between the internet and private network.

Describe the typical devices and services involved in a DMZ architecture.

Consider what hardware controls access and what servers are placed in the DMZ.