Larry is placing the new email server in a Demilitarized Zone (DMZ). A DMZ is a physical or logical

subnetwork that contains and exposes an organization’s external-facing services to an untrusted

network, usually the internet. The purpose of a DMZ is to add an additional layer of security to an

organization’s local area network (LAN); an external attacker only has access to equipment in the

DMZ, rather than any other part of the network. The email server placed in the DMZ can be accessed

from the internet, but it does not have direct access to the internal network, which reduces the risk

of an internal security breach if the email server is compromised.

Reference: The concept of a DMZ is covered in the EC-Council’s Certified Network Defender (C|ND)

program, which teaches network administrators how to secure their networks against threats. The

C|ND program includes strategies for protecting network infrastructure and creating secure

architectures, which involves the use of DMZs123.