Es1

Page 1

Demo exam Question 1 (6 points) An advertisement company is deploying a new enterprise information system, and needs to satisfy the following requirements: there is a web server, which is used both to present the services and to allow the customers to access a private folder with proofs and materials. The employees need to have access to the web (to download information and inputs for their job) and to be able to exchange emails with customers. A further web application is used by employees to manage bi lling and invoicing for the customers. Basic DNS infrastructure must also be deployed. Please draw a network scheme indicating all of the components needed for this infrastructure, the deployment of security devices such as firewalls, the rules applied to the firewalls, and any other thing you think is needed to secure this network appropriately. The figure below shows the network scheme (of course the network complexity is strictly related to the size of the specific company), which is a simple example of a dual zone architecture. The presence of each component is due to a specific requirement in the exercise text.  …there is a web server, which is used both to present the services and to allow the customers to access a private folder… A further web applic ation is used by employees to manage billing and invoicing for the customers. It means that we need an external web server accessible to the customers (i.e. in the DMZ), and an internal web server with a database for the employees.  The employees need to have access to the web(to download information and inputs for their job)… Fileserver that should be accessible only to the employees, so there is no need to put it in the DMZ.  The employees need to be able to exchange emails with customers… So we have to put: o…