A company hosts a public web server that must be accessible from the internet, but they want to protect their internal database server from direct external access. Which network design best achieves this?

Place both servers in the DMZ and rely on the firewall to block external access to the database.

Place both servers on the internal network and use a firewall to allow inbound traffic to the web server only.

Place the database in the DMZ and the web server on the internal network, with a firewall allowing external traffic to the web server.

Place the web server in a DMZ and the database server on the internal network, with firewall rules allowing the web server to access the database on a specific port.

How does subnetting contribute to network segmentation?

By combining multiple networks into a single larger network

By dividing a network into smaller logical networks based on IP addressing

By replacing the need for VLANs in a network

By providing encryption for data at the IP layer

What is the primary purpose of an Access Control List (ACL) in a segmented network?

To assign IP addresses to devices on the network

To physically separate network segments

To provide encryption for data in transit

To filter traffic based on rules such as source and destination IP addresses

Which of the following is a best practice for implementing network segmentation?

Avoid using firewalls between segments to reduce latency

Apply the principle of least privilege by allowing only necessary traffic between segments

Place all servers in a single segment for easier management

Use the same security policy for all segments to simplify administration

Where are ACLs typically applied to filter traffic between network segments?

On routers and Layer 3 switches

CompTIANetwork+

Domain 4Objective 6

Network Segmentation N10-009 Practice Questions (Page 4)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

9concepts

Questions 16–20

16application · medium
A company hosts a public web server that must be accessible from the internet, but they want to protect their internal database server from direct external access. Which network design best achieves this?
Select an answer first
17foundation · easy
How does subnetting contribute to network segmentation?
Select an answer first
18foundation · easy
What is the primary purpose of an Access Control List (ACL) in a segmented network?
Select an answer first
19foundation · easy
Which of the following is a best practice for implementing network segmentation?
Select an answer first
20foundation · easy
Where are ACLs typically applied to filter traffic between network segments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.