Which policy governs the management and monitoring of firewall devices within the organization?

Which policy governs the management and monitoring of firewall devices within the organization?

• A. Information-Protection Policy
• B. Remote-Access Policy
• C. Firewall- Management Policy
• D. Special-Access Policy

Answer: (C)

Managing and monitoring firewall devices is governed by a policy that defines how these security appliances are operated throughout their lifecycle. This policy specifies who may access the firewall management interfaces, how configurations are changed and approved, how patches are applied, and what baseline configurations must be maintained. It also covers how logs are generated, stored, reviewed, and alerted on, along with the processes for change control, incident response, and regular audits to ensure the devices function correctly and securely. In short, it sets the rules for day-to-day administration and ongoing monitoring of firewalls, making it the appropriate choice. Other policies focus on different areas: information protection centers on safeguarding data, remote-access addresses how users connect to the network remotely, and special-access governs elevated permissions to sensitive resources rather than the routine management of firewall devices.

Managing and monitoring firewall devices is governed by a policy that defines how these security appliances are operated throughout their lifecycle. This policy specifies who may access the firewall management interfaces, how configurations are changed and approved, how patches are applied, and what baseline configurations must be maintained. It also covers how logs are generated, stored, reviewed, and alerted on, along with the processes for change control, incident response, and regular audits to ensure the devices function correctly and securely. In short, it sets the rules for day-to-day administration and ongoing monitoring of firewalls, making it the appropriate choice.

Other policies focus on different areas: information protection centers on safeguarding data, remote-access addresses how users connect to the network remotely, and special-access governs elevated permissions to sensitive resources rather than the routine management of firewall devices.