CISM Certified Information Security Manager – Question0662

An e-commerce order fulfillment web server should generally be placed on which of the following?

A.
Internal network
B. Demilitarized zone (DMZ)
C. Database server
D. Domain controller

Correct Answer: B

Explanation:

Explanation:
An e-commerce order fulfillment web server should be placed within a DMZ to protect it and the internal network from external attack. Placing it on the internal network would expose the internal network to potential attack from the Internet. Since a database server should reside on the internal network, the same exposure would exist. Domain controllers would not normally share the same physical device as a web server.