The network manager has obtained a public IP address for use with a new system to be available
via the internet. This system will be placed in the DMZ and will communicate with a database
server on the LAN. Which of the following should be used to allow fir proper communication
between internet users and the internal systems?
A.
VLAN
B.
DNS
C.
NAT
D.
HTTP
E.
SSL
I think the answer should be C -NAT.
1
0
I am confused. It should either be NAT or DNS.
0
0
Another badly written question with a wrong answers
• We have a server in the DMZ with an external IP address
• This server needs to “communicate with a database server on the LAN”
• This means that for the server to be able to communicate, it cannot use the external IP address. It has to use by pure necessity an internal IP address in the same subnet as the “database server on the LAN”
So we have a sub netting issue in here, and the solution MUST involve the server in the DMZ having a properly configured internal IP address in the same subnet as the DB server.
PROCESS OF ELIMINATION:
A.VLAN. It would be quite impossible to have a VLAN containing a device in the DMS and another inside the corporate network. It has to be one or the other
B.DNS – It sounds like a good answer but it does not go far enough. It has to contain an A record for the server bound to an internal IP address
D.HTTP – This is a protocol which fails to give the server in the DMZ and internal IP address
E.SSL – This is a protocol which fails to give the server in the DMZ and internal IP address
So the best answer really is C. NAT
Network Address Translation (NAT) is the process where a network device, usually a firewall, assigns a public address to a computer (or group of computers) inside a private network. The main use of NAT is to limit the number of public IP addresses an organization or company must use, for both economy and security purposes.
There are other uses for Network Address Translation (NAT) beyond simply allowing workstations with internal IP addresses to access the Internet. In large networks, some servers may act as Web servers and require access from the Internet. These servers are assigned public IP addresses on the firewall, allowing the public to access the servers only through that IP address. However, as an additional layer of security, the firewall acts as the intermediary between the outside world and the protected internal network.
0
0