Assume you're working for a manufacturing company that uses an online ordering system that consists of a web server that communicates with a database server. The web server needs to accessible from the Internet, but you want to protect the database as much as possible and only allow access to authorized employees and from queries from the web server. In other words, you don't want the general public to be able to access the database directly, they should only access it indirectly when they place an order through the web server. To protect your intranet you have used two firewalls to create a DMZ. How should you place your web server and database server on the network to provide the best protection?