A security administrator notices that a specific network administrator is making unauthorized changes to the firewall every Saturday morning. Which of the following would be used to mitigate this…

Mandatory vacations temporarily remove an employee from duty but do not alter their access rights or prevent unauthorized changes when they are present.

Job rotation moves employees between roles periodically but does not restrict the permissions available to any given role at any given time.

Least privilege restricts each user account to only the rights and permissions required for their specific job duties. By ensuring that only security administrators hold the access rights to modify firewall rules, network administrators are technically unable to make those changes regardless of when they attempt to do so.

Time of day restrictions would limit when the administrator could make changes but would not prevent unauthorized access during permitted hours.