CompTIA CASP+ Practice Test

Which DMZ design is best suited for enhanced security for a company's network?

1. A single firewall with no remote logging.

2. A dual firewall DMZ with shared management.

3. A dual firewall DMZ with remote logging.

4. A single firewall with multiple access points.

The correct answer is: A dual firewall DMZ with remote logging.

A dual firewall DMZ with remote logging is considered best suited for enhanced security due to several important factors. The use of dual firewalls creates a layered defense, which is a fundamental principle in security design. This boundary separates the internal network from the public-facing services, significantly reducing the risk of an attacker gaining direct access to the internal network. The presence of remote logging enhances security by ensuring that logs of all activities are captured and stored securely, away from the firewalls themselves. This means that if an attacker compromises one of the firewalls, the logs remain intact and can be used for forensic analysis, incident response, and ongoing monitoring of security events. Remote logging allows organizations to review suspicious activities, maintain compliance with regulations, and conduct thorough audits without the risk of log manipulation from within the network. This combination of dual firewalls and remote logging provides a robust security posture, as it mitigates risk through redundancy and improves incident response capabilities, making it a clear choice for organizations looking to bolster their network security.