A DMZ is located:

A.
right behind your first Internet facing firewall

B.
right in front of your first Internet facing firewall

C.
right behind your first network active firewall

D.
right behind your first network passive Internet http firewall

Explanation:
A demilitarized zone is shielded by two firewalls: one right behind the first Internet facing the Internet, and one
facing the private network.
Incorrect Answers:
B: A demilitarized zone is shielded by the Internet facing firewall. It is not placed outside this firewall.
C: A demilitarized zone is placed behind the first Internet facing firewall, not behind the first network active
firewall.
D: A demilitarized zone does not need to be placed behind a network passive Internet http firewall. It just needs
to be place behind the first Internet facing firewall.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 629