The BEST reason for an organization to have two discrete firewalls connected directly to the
Internet and to the same DMZ would be to:
A.
provide in-depth defense.
B.
separate test and production.
C.
permit traffic load balancing.
D.
prevent a denial-of-service attack.
Explanation:
Having two entry points, each guarded by a separate firewall, is desirable to permit traffic load
balancing. As they both connect to the Internet and to the same demilitarized zone (DMZ), such an
arrangement is not practical for separating test from production or preventing a denial-of-service
attack.