Question

A network technician is tasked with designing a firewall to improve security for an existing FTP server that is on the company network and is accessible from the Internet. Security personnel are concerned that the FTP server is compromised and is possibly being used as a platform to attack other company servers. What is the BEST way to mitigate this risk? (A) Add an outbound ACL to the firewall(B) Change the FTP server to a more secure SFTP.(C) Use the implicit deny of the firewall(D) Move the server to the DMZ of the firewall

Answer 1

(D) Move the server to the DMZ of the firewall.

Step-by-step explanation:

DMZ (demilitarized zone):-It is a logical or physical subnet that filters an internal LAN(Local area Network) from other networks that are not trusted.So by moving the server to the DMZ of the firewall is the best way to mitigate this kind of risk for the technician.