SYSTEM-DESIGN
    intermediate

    Perimeter Security

    Software Engineer path · lesson 87 of 99
    Public Internet
    DMZ (Public Facing)
    Web Server
    Inner FW
    Internal Intranet (Secure)
    Internal App
    Server
    Outer FW

    Firewall, DMZ or VPN?

    Sort

    Sort each description into the perimeter control it describes.

    Tap a piece, then tap where it goes — or drag it. Tap the tray to take one back.

    Firewall

    Drop items here

    DMZ

    Drop items here

    VPN

    Drop items here
    6 pieces left to place

    Test your knowledge

    21 questions
    Question 1 of 21
    Score: 0

    Which architecture component is designed specifically to host public-facing services while protecting the internal intranet?

    The short version

    A Perimeter is like a castle's defenses. The DMZ is the courtyard between the outer and inner walls where merchants trade. The VPN is a secret underground tunnel for knights to enter safely. SSH is the heavily guarded back door for the castle administrators.

    In more depth

    Perimeter Security

    The network perimeter is the boundary between your private, managed network and the public, untrusted internet.

    Key Concepts

    DMZ (Demilitarized Zone): A subnetwork that sits between the internet and the internal network. It hosts services that must be exposed (like Web Servers) while isolating them from sensitive internal data.
    VPN (Virtual Private Network): An encrypted connection over the internet from a device to a network. It ensures remote workers can safely access internal resources.
    Bastion Host / SSH: A hardened server used to access internal resources. Instead of exposing internal servers to the internet, admins SSH into the Bastion, and from there, SSH into the internal servers.

    Interview Questions

    Netflix
    Amazon
    Cloudflare
    Amazon
    Google
    Meta
    Google
    Microsoft

    Love this visualization?

    Sign up to track your progress, earn achievements, use the AI assistant, and access your personal learning dashboard.

    100% free • No credit card required