Architects are placing controls for a citizen portal and for privileged admin access to backend servers. Which placement best matches secure infrastructure practice?
Select an answer to reveal the explanation.
Short Explanation
Public web gets a web bodyguard out front; admins walk through a guarded side door, not the lobby. WAF for the portal, jump server for privileged reach. Direct Internet RDP to everything is the wrong map.
Full Explanation
Secure enterprise infrastructure places protective appliances appropriately and constrains administrative paths. A WAF belongs in front of HTTP-facing citizen applications, while jump servers mediate privileged access instead of exposing management protocols broadly. TLS alone does not replace application-layer protections or controlled admin entry points.