Which policy outlines the terms for granting special access to system resources?

Which policy outlines the terms for granting special access to system resources?

• A. Access Control Policy
• B. User- Account Policy
• C. Remote-Access Policy
• D. Special-Access Policy

Answer: (D)

Special access policies govern how elevated privileges or exceptions to normal access rules are granted, including who can authorize them, under what circumstances, for how long, and how they are monitored and revoked. This makes it the best fit for outlining the terms for granting special access to system resources, because it explicitly covers the procedures, approvals, time limits, justification, and audit requirements that apply to privileged or exception-based access. In contrast, a general access control policy defines the overarching rules for who can access which resources under normal conditions, but it doesn’t detail the processes for obtaining elevated or exceptional rights. A remote-access policy focuses on securing connections from outside the trusted network, covering things like VPN requirements and authentication methods. A user-account policy deals with the lifecycle and security of user accounts, such as creation, deactivation, and password controls, rather than the rules for granting special access.

Special access policies govern how elevated privileges or exceptions to normal access rules are granted, including who can authorize them, under what circumstances, for how long, and how they are monitored and revoked. This makes it the best fit for outlining the terms for granting special access to system resources, because it explicitly covers the procedures, approvals, time limits, justification, and audit requirements that apply to privileged or exception-based access.

In contrast, a general access control policy defines the overarching rules for who can access which resources under normal conditions, but it doesn’t detail the processes for obtaining elevated or exceptional rights. A remote-access policy focuses on securing connections from outside the trusted network, covering things like VPN requirements and authentication methods. A user-account policy deals with the lifecycle and security of user accounts, such as creation, deactivation, and password controls, rather than the rules for granting special access.