DMZ architecture in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the sentence to describe the purpose of a DMZ in network security.

Cybersecurity

A DMZ is a [1] network that separates an internal network from untrusted external networks.

Drag options to blanks, or click blank then click option'

Asecure

Bprivate

Cdemilitarized

Dencrypted

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing DMZ with a fully secure or private network.

Thinking DMZ means encrypted network.

A DMZ stands for Demilitarized Zone, which is a network area that acts as a buffer between the internal network and external untrusted networks like the internet.

2fill in blank

medium

Complete the sentence to explain what types of servers are typically placed in a DMZ.

Cybersecurity

Servers that need to be accessible from the internet, such as [1], are placed in the DMZ.

Drag options to blanks, or click blank then click option'

Aweb servers

Bdatabase servers

Cinternal file servers

Dbackup servers

Attempts:

3 left

💡 Hint

Common Mistakes

Placing internal file servers in the DMZ.

Assuming database servers are directly exposed in the DMZ.

Web servers are commonly placed in the DMZ because they must be accessible from outside the internal network, while protecting internal resources.

3fill in blank

hard

Fix the error in the description of DMZ placement.

Cybersecurity

The DMZ is located [1] the internal network and the external network.

Drag options to blanks, or click blank then click option'

Abehind

Bbetween

Coutside

Dinside

Attempts:

3 left

💡 Hint

Common Mistakes

Saying the DMZ is inside the internal network.

Saying the DMZ is outside the external network.

The DMZ is a network segment placed between the internal trusted network and the external untrusted network, acting as a buffer zone.

4fill in blank

hard

Fill both blanks to complete the sentence about firewall placement in a DMZ architecture.

Cybersecurity

A typical DMZ setup uses [1] firewalls to separate the internal network, DMZ, and external network, creating [2] layers of security.

Drag options to blanks, or click blank then click option'

Atwo

Bone

Cmultiple

Dthree

Attempts:

3 left

💡 Hint

Common Mistakes

Assuming only one firewall is used.

Confusing the number of firewalls with the number of security layers.

Usually, two firewalls are used: one between the external network and the DMZ, and another between the DMZ and the internal network, creating three distinct zones and layers of security.

5fill in blank

hard

Fill all three blanks to complete the dictionary comprehension describing DMZ traffic filtering.

Cybersecurity

rules = {{'{'}}'allow_http': lambda pkt: pkt.port == [1], 'allow_ssh': lambda pkt: pkt.port == [2], 'block_all': lambda pkt: pkt.port [3] 0{{'}'}}

Drag options to blanks, or click blank then click option'

A80

B22

C!=

D==

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up port numbers for HTTP and SSH.

Using '==' instead of '!=' for blocking other ports.

HTTP traffic uses port 80, SSH uses port 22, and all other ports (not equal to 0) are blocked in this example filtering rules.

Practice

1. What is the main purpose of a DMZ (Demilitarized Zone) in network security?

easy

A. To store backup data securely

B. To speed up internet connection for all users

C. To replace firewalls in a network

D. To separate and protect the internal network from external threats

Solution

1. Step 1: Understand the role of DMZ

   A DMZ is a special network area that acts as a buffer between the internet and the internal network.

2. Step 2: Identify its main function

   It hosts public services like websites while protecting the private internal network from outside threats.

3. Final Answer:

   To separate and protect the internal network from external threats -> Option D

4. Quick Check:

   DMZ protects internal network = C [OK]

Hint: DMZ acts as a buffer zone between internet and private network [OK]

Common Mistakes:

• Thinking DMZ speeds up internet
• Confusing DMZ with backup storage
• Believing DMZ replaces firewalls

2. Which device is typically used to control traffic between the internet, DMZ, and internal network?

easy

A. Firewall

B. Router

C. Switch

D. Modem

Solution

1. Step 1: Identify devices managing network traffic

   Firewalls are security devices that control and filter traffic between different network zones.

2. Step 2: Match device to DMZ traffic control

   Firewalls regulate access between the internet, DMZ, and internal network to protect sensitive data.

3. Final Answer:

   Firewall -> Option A

4. Quick Check:

   Traffic control device = Firewall = A [OK]

Hint: Firewalls filter traffic between network zones like DMZ [OK]

Common Mistakes:

• Confusing routers with firewalls
• Thinking switches control security
• Assuming modems manage internal traffic

3. Consider this simplified network setup:
Internet -- Firewall -- DMZ -- Firewall -- Internal Network
Which statement is true about traffic flow?

medium

A. Traffic from the internet can directly access the internal network

B. Traffic from DMZ can bypass firewalls to reach the internet

C. Traffic must pass through two firewalls before reaching the internal network

D. Internal network traffic goes directly to the internet without restrictions

Solution

1. Step 1: Analyze the network layout

   Traffic from the internet passes through the first firewall to enter the DMZ, then through a second firewall to reach the internal network.

2. Step 2: Understand traffic restrictions

   Firewalls control and filter traffic, so direct access from internet to internal network is blocked.

3. Final Answer:

   Traffic must pass through two firewalls before reaching the internal network -> Option C

4. Quick Check:

   Two firewalls protect internal network = B [OK]

Hint: Traffic passes through all firewalls in path order [OK]

Common Mistakes:

• Assuming direct internet access to internal network
• Believing DMZ bypasses firewalls
• Ignoring firewall filtering rules

4. A network admin set up a DMZ but notices internal users can access public web servers without firewall checks. What is the likely error?

medium

A. The internal network has no internet connection

B. The DMZ is not separated by a firewall from the internal network

C. The DMZ is connected directly to the internet without firewall

D. The firewall rules are too strict blocking all traffic

Solution

1. Step 1: Identify the problem

   Internal users accessing DMZ servers without firewall checks means no filtering between internal network and DMZ.

2. Step 2: Find the cause

   This usually happens if the DMZ is not properly separated by a firewall from the internal network.

3. Final Answer:

   The DMZ is not separated by a firewall from the internal network -> Option B

4. Quick Check:

   Missing firewall between DMZ and internal = D [OK]

Hint: Check firewall between DMZ and internal network [OK]

Common Mistakes:

• Assuming firewall rules are too strict
• Thinking DMZ connects directly to internet
• Believing internal network lacks internet

5. A company wants to host a public website and an internal database securely. Which DMZ architecture best protects the internal database?

hard

A. Place the website in the DMZ and the database behind a firewall in the internal network

B. Place both website and database in the DMZ for easy access

C. Place the database in the DMZ and the website in the internal network

D. Place both website and database directly on the internet

Solution

1. Step 1: Understand security needs

   The public website must be accessible from the internet, so it belongs in the DMZ.

2. Step 2: Protect sensitive data

   The internal database contains private data and should be behind a firewall inside the internal network, not exposed in the DMZ.

3. Step 3: Choose the best architecture

   Placing the website in the DMZ and database behind firewall inside internal network keeps data safe and services accessible.

4. Final Answer:

   Place the website in the DMZ and the database behind a firewall in the internal network -> Option A

5. Quick Check:

   Website public in DMZ, database protected internally = A [OK]

Hint: Public services in DMZ, sensitive data inside firewall [OK]

Common Mistakes:

• Putting database in DMZ exposing sensitive data
• Placing both services in DMZ risking security
• Exposing both directly to internet