Exam CS0-002 topic 1 question 138 discussion

C is the best answer. I still don't like it. What is that application for? "The DMZ is a special network zone designed to house systems that receive connections from the outside world, such as web and email servers. Sound firewall designs place these systems on an isolated network where, if they become compromised, they pose little threat to the internal network because connections between the DMZ and the internal network must still pass through the firewall and are subject to its security policy"

Creating a proper DMZ for outdated components and segregating the JBoss server is the best action to take first to prevent server compromise and business disruption at the same time. A DMZ (demilitarized zone) is a network segment that separates internal networks from external networks, such as the internet, and provides an additional layer of security3. Creating a proper DMZ for outdated components and segregating the JBoss server can isolate and protect the critical server from external attacks that may exploit its vulnerability.

This is because updating the JBoss server is the most direct way to address the security vulnerability. Making a backup of the server first will help to protect the data in case something goes wrong during the update process

I think If any application is outdated it is more Vulnerable, it doesn't matter u put behind firewall of in DMZ by usend that vulnerability attacker can exploit system. So the first step is to update JBoss.

C seems correct.