Remote-access policies require automatic session disconnect after inactivity. Which statement matches this requirement?

Remote-access policies require automatic session disconnect after inactivity. Which statement matches this requirement?

• A. Automatic disconnect is required after a period of inactivity
• B. Auto-disconnect is optional
• C. No auto-disconnect policy
• D. Disconnect but only after admin approval

Answer: (A)

Automatic session termination after inactivity is a protective control that prevents unattended remote-access sessions from staying open. When a session is automatically disconnected after a period of inactivity, it reduces the risk of someone else using an unlocked workstation or continuing to access sensitive data without re-authenticating. This aligns with PCI DSS goals of limiting access and protecting data by enforcing timely session end, especially for remote access. The other options weaken protection or introduce friction that defeats the purpose: making auto-disconnect optional means sessions could remain open indefinitely; having no auto-disconnect policy allows unattended access; requiring admin approval adds delays and human factors that can leave sessions exposed longer than necessary.

Automatic session termination after inactivity is a protective control that prevents unattended remote-access sessions from staying open. When a session is automatically disconnected after a period of inactivity, it reduces the risk of someone else using an unlocked workstation or continuing to access sensitive data without re-authenticating. This aligns with PCI DSS goals of limiting access and protecting data by enforcing timely session end, especially for remote access.

The other options weaken protection or introduce friction that defeats the purpose: making auto-disconnect optional means sessions could remain open indefinitely; having no auto-disconnect policy allows unattended access; requiring admin approval adds delays and human factors that can leave sessions exposed longer than necessary.