A company recently outsourced its night-shift cleaning service. A technician is concerned about having unsupervised contractors in the building. Which of the following security measures can be used to

Implementing data-at-rest encryption protects data if the drive is physically removed or stolen, but it does not prevent access to a powered-on, unlocked computer.

Disabling AutoRun prevents automatic execution of media, which is good security practice but not a primary control for preventing direct computer access by an individual.

Restricting user permissions limits what a logged-in user can do, but it does not prevent them from logging in or initially accessing the system during unauthorized hours.

Restricting log-in times ensures that user accounts can only be accessed during specified operational hours, preventing unauthorized access during the night-shift when contractors are present.

Enabling a screen lock (with a strong password or other authentication) prevents physical access to an unattended but logged-in computer, requiring re-authentication to resume use.

Disabling local administrator accounts limits the privileges of local accounts, but it does not prevent standard users from logging in or stop physical access to an unlocked machine.