Remote Access connections can originate from where?

• A. From inside or outside
• B. From a trusted partner only
• C. Only from inside
• D. Only from outside

Answer: (A)

Remote access connections can originate from either inside the network or from outside it. In real-world use, someone may access systems from within the corporate network or remotely from a location outside the network via tools like VPN or secure remote protocols. PCI DSS requires secure, controlled remote access to the cardholder data environment, but the source of the connection isn’t limited to only inside or only outside—the origin can be on either side as long as proper security measures (strong authentication, logging, least privilege, etc.) are in place. Limiting origins to inside, outside, or only trusted partners would miss common legitimate scenarios.