Which of the following statements is true regarding the access control of users for the use of the MEN network?


a) MEN users should only have direct access permission to applications and databases for which they are specifically authorized to use.
b) All remote user access to MEN information systems and applications must be controlled through authentication.
c) All remote connections made to MEN information systems must be authenticated.
d) Ports used for remote diagnosis and configuration should be closed to prevent unauthorized access.