Which two are design alternatives in the SAFE SMR midsize network design corporate Internet module? (Choose two)
A.
Place a URL filtering server on the public services segment.
B.
Eliminate the router between the firewall and the campus module.
C.
Set up a small filtering router between the management stations and the rest of the network.
D.
Eliminate HIDS.
Explanation:
Two other alternatives are available. First is the elimination of the router between the firewall and the campus module. Although its functions can be integrated into the campus module Layer 3 switch, this setup would eliminate the ability of the corporate Internet module to function without relying on Layer 3 services from another area of the network. Second is the addition of content inspection beyond the mail-content inspection already specified. For example, a URL filtering server could be placed on the public services segment to filter the types of Web pages that employees can access. Reference: SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks Page 21