Which of the following can the cloud provider implement to mitigate credential compromise or theft?

Separation of roles and responsibilities limits the blast radius of a compromised credential by restricting what any single identity can do, but it does not detect or prevent the credential theft event itself.

Automated inventory of all assets supports asset visibility and management but does not address or mitigate the risk of credential compromise or theft.

A federated method of authentication delegates authentication to an identity provider, which can improve posture, but it does not by itself detect or mitigate credential misuse once credentials have already been stolen.

Hardening virtual machines using industry standards reduces attack surface on compute resources but does not directly address the risk of credential compromise or theft.

Anomaly detection systems monitor access behavior and flag deviations from established baselines, such as logins from unusual locations, atypical times, or access patterns inconsistent with the account's history, all of which may indicate stolen credentials are being used. This is a direct mitigation for credential compromise because it detects active misuse even when valid credentials are presented. Cloud providers implement anomaly detection as part of continuous security monitoring to alert on and respond to potential credential theft in near real time.