The recommended architecture for secure web application deployment is a multi-tiered setup:
Web server in the DMZ (public-facing)
Application server on the internal network
Database server on the internal network
This design limits the exposure of critical components. Only the web server is exposed to the internet, while application and database servers are shielded by firewalls and only accessible internally.
Reference – CEH v13 Official Study Guide:
Module 10: Hacking Web Servers
Quote:
“Place the web server in the DMZ and keep the application and database servers within the internal network. This reduces the attack surface and provides layered security.”
Incorrect Options Explained:
A. Internal placement makes them inaccessible externally.
C & D. Exposing the database or all servers to the internet introduces significant risk.
===========
Submit