The catch in that question is the word 'Simple' For you to implement option A, you must have a Firewall system having at least three interface(inside,outside,dmz) so that you can utilize the DMS concept and put the public marketing data (The word 'Public' is another word for dmz-The 3rd interface, where public data in a good Security design should be kept) there and put the proprietary sales figures in your inside (Private) network. That is the only way the firewall can help control access to these two set of data.
For option C, a Firewall with just two interface(inside and outside) or even a Cisco Router with Cisco Firewall IOS will do the job, just implement CBAC or a websense Server to filter out the unwanted site. Again more configurations would be needed to achieve the goal stipulated in option A, at least you would configure the dmz interface parameters, etc; while one or just two lines of command would accomplish the goal in option C. So it is obvious that from hardward and software point of view, option C is the more 'simple firewall' aproach for any one. Enjoy Godswill Oletu CCNP,CCDP,CSS1. ----- Original Message ----- From: Brian To: Sent: Saturday, February 23, 2002 12:39 AM Subject: Re: Please help me answer this question [7:36295] > to me b and d are out of the running because they are looking to prevent > people from modifying data, thats an application issue. So youre left > with a and c. A seems to be a problem best solved by putting the info on > separate drives or devices, so I vote c. A case could be made for a > however, if you say put the data on separate devices then use the firewall > to permit some access and prevent others. I'm stickin with c. > > Brian > > On Sat, 23 Feb 2002, Clayton Dukes wrote: > > > Hmmm.... > > > > > > Clayton Dukes > > CCNA, CCDA, CCDP, CCNP, NCC > > (h) 904-292-1881 > > (c) 904-477-7825 > > #rm -rf /bin/laden > > #kill -9 /bin/laden > > > > > > ----- Original Message ----- > > From: "Love Cisco" > > To: > > Sent: Friday, February 22, 2002 10:15 PM > > Subject: Please help me answer this question [7:36295] > > > > > > > 1. Which of the following customers can probably meet their security > > > requirements with a simple firewall system? > > > A. Company ABC wants to make sure customers can see public marketing data > > > but not proprietary sales figures. > > > B. University ABC want to make sure students can see but not change their > > > grades in administrative database. > > > C. Company XYZ wants to make sure employees do not download software from > > > unauthorized site. > > > D. University XYZ wants to make sure that public central software > > developed > > > at the university stops working after a period of time if the user does > > not > > > pay shareware fees. > > > ============================================= > > > I think C is right. But some people think A. > > > > > > What do you think? Why? _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36309&t=36295 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
