Unit 4 – Security Zones & DMZ

Vocabulary flashcards covering key terms and concepts related to security zones, firewalls, and DMZ configurations from Unit 4.

Security Zone

A logically separated network segment created by firewall rules to enforce specific security policies.

Zones

Firewalls allow a network administrator to divide a network into different network segments known as

Firewall

A network device or software that controls traffic flow and allows administrators to divide the network into multiple security zones.

Private Zone

The internal, trusted part of a network (e.g., the LAN) that is isolated from external networks.

a. Private zone.

b. Demilitarized zone.

c. Public zone.

When creating your firewall plan you will typically create what three security zones?

Demilitarized Zone (DMZ)

A network segment positioned between two firewalls that permits selected Internet traffic to reach public-facing resources while shielding the private zone.

Public Zone

The untrusted, openly accessible portion of a network—typically the Internet itself.

Extranet

A set of servers made accessible to selected external organizations via the Internet or other public zones.

Extranet Zone

The security zone where public-facing servers reside to serve approved external partners.

Guest Zone

A dedicated network segment designed for visitors at an office location, often providing Internet-only access.

Wireless Zone

The security zone that houses Wi-Fi networks, logically separating them from wired and private segments.

Internal Firewall (within DMZ)

The firewall that sits between the DMZ and the private zone, blocking any traffic originating from the Internet from entering the internal network.

Local Area Network (LAN)

An internal network belonging to the private zone, connecting organizational devices in a limited geographic area.

Public-Facing Server

A server placed in the extranet or DMZ to provide services (e.g., web, email) to external users while isolating the private network.

Internet

A global, public network representing the public zone in security-zone architecture.

Wi-Fi

A wireless networking technology placed in the wireless zone to separate radio-based access from the wired LAN.

Visitor Wi-Fi

A wireless network mapped to the guest zone, offering limited Internet access for office visitors.