Which of the following security policies defines the use of VPN for gaining access to an internal corporate network?

Network security policy covers the broader protection of network infrastructure such as firewalls, routers, and switches, not the specific rules governing remote user access methods like VPN.

Information protection policy focuses on data classification, handling, and protection requirements for sensitive information, not on the mechanisms or rules for remotely accessing the corporate network.

Access control policy defines who is authorized to access which resources and under what role-based conditions, but it does not specifically prescribe the use of VPN as the remote connectivity technology.

A Remote Access Policy defines acceptable methods, authentication requirements, and usage rules for connecting to corporate resources from outside the organization's physical network, with VPN being the primary technology it addresses. It specifies who may use VPN, which VPN clients and protocols are approved, and what conditions must be met before a remote connection is granted, making it the direct policy owner for VPN-based access.