Certified Ethical Hacker (CEH v11) — Question 260

A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed.
Which security policy must the security analyst check to see if dial-out modems are allowed?

Answer options

• A. Firewall-management policy
• B. Acceptable-use policy
• C. Permissive policy
• D. Remote-access policy

Correct answer: D

Explanation

The correct answer is D, as the Remote-access policy typically governs the use of remote connections, including dial-out modems. The other options do not specifically address remote access methods or devices, making them less relevant for this scenario.