Placing Proxy Server - Quiz Explanation
The correct answers are indicated below, along with the text that explains the correct answers.
1.
Screened subnets are created within the private network, thereby protecting confidential data..
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is B.
A proxy server is considered an "edge" proxy server when it contains multiple interfaces, with one of the interfaces on a public network (such as the Internet). A DMZ subnet can be created by placing a third adapter into the proxy server, and connecting that adapter to a private network segment that Internet users will access. Typically, this private network will use public IP addresses, while the internal network will use private IP addresses. Using the DMZ subnet will allow you toplace publicly accessible material on a subnet away from your internal resources.
2.
Users on the private networks can access the Internet...
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is C.
A proxy server can be placed with all interfaces connected to the private network and allow Internetaccess to users via the proxy server. The proxy server accepts all requests on behalf of the internal network clients, and then forwards those requests to its gateway to the Internet. Internal network clients can also access the Internet via a proxy server that is on the edge of the private network. In this case, Internet requests are accepted by the internal interface of the edge proxy server, and those requests are forwarded to Internet sites via the external interface of the same server.
3.
Web objects are cached for individual network segments within an organization to reduce private network traffic...
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is A.
You can reduce the overall amount of traffic on the internal network backbone by placing proxy servers on the edge of each network segment. If you place a single proxy server just at the edge of the private network, each network segment will have to make requests that traverse the backbone. Therefore, this configuration does not reduce the overall amount of internal network traffic when compared to the former approach.
4.
Network packets can be exchanged between dissimilar network segments, such as between an Ethernet network segment and an ATM network segment.
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is C.
The only requirement for network packet exchange is that the proxy server have two dissimilar network interfaces, such as ATM and Fast Ethernet. The proxy server will be able to forward requests between the two segments, just as any router might be able to do.
5.
Web objects are cached for the entire organization...
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is C.
You can cache objects for an entire organization using either an edge or a completely internal proxy server.
6.
The private network is isolated from the public network, thereby protecting confidential data...
Please select the best answer.
A.
when Proxy Server is placed within the private network
B.
when Proxy Server is placed at the edge of the private network
C.
when Proxy Server is placed in either situation (within or at the edge of the private network)
The correct answer is B.
In order to use the proxy server to create the DMZ, you must install multiple interfaces into the proxy server. The proxy server must have an interface with the public network and an interface with the private and DMZ network. Then, you create different filters and security policies for each interface, and in the process protect the internal network from access by Internet users.
