Es2

Page 1

Sign. Surname Name ID (matricola) Exam of DEMO V ersion 1.0 Computer Security Prof. Stefano Zanero Punteggi: QuestionMaxPoints 1 6 2 3 3 8 4 3 5 4 6 6 7 4 Total: 34 Instructions •The exam is “closed books”. Please put away in a non-suspicious place (i.e. not below the desk) any note, book, or similar •Shut down and store electronic devices. They will be subject to inspection if found. •Please answer within the allowed space. Schemes are good, short answers are rec- ommended. •You can write in pen or pencil, any color, but avoid writing in red. Question 1(6 points) An advertisement company is deploying a new enterprise information system, and needs to satisfy the following requirements: there is a web server, which is used both to present the services and to allow the customers to access a private folder with proofs and materials. The employees need to have access to the web (to download information and inputs for their job) and to be able to exchange emails with customers. A further web application is used by employees to manage billing and invoicing for the customers. Basic DNS infrastructure must also be deployed. Please draw a network scheme indicating all of the components needed for this infrastructure, the deployment of security devices such as firewalls, the rules applied to the firewalls, and any other thing you think is needed to secure this network appropriately . Answer All rights are reserved. Politecnico di Milano 2009/2010 LEGGERE LE DOMANDE IN ORDINE: AIUTANO A CAPIRE IL CONTESTO DELL'ESERCIZIO, PER LA RISOLUZIONE É POSSIBILE AFFRONTARLE IN QUALSIASI ORDINE Solitamente lo schema é diviso cosí, ma alcune volte saranno necessarie ULTERIORI divisioni della rete, per cui fare molta attenzione a parti del testo che lo suggeriscono DMZ LAN Internet Disegnare la…