Human Resources suspects an employee is accessing the employee salary database. The administrator is asked to find out who it is. In order to complete this task, which of the following is a security…

When multiple employees share a single account, audit logs and access records cannot be tied to a specific individual. Eliminating shared accounts ensures that every access event in the audit trail maps to one unique, identifiable user, which is a prerequisite for any meaningful investigation.

Account lockout policies protect against brute-force login attempts and do not help attribute database access to a specific person.

Assigning privileges to groups rather than individuals is a management best practice but still does not identify which individual within the group performed an action.

Time of day restrictions limit when accounts can be used but do not help identify the specific individual behind the access if accounts are shared.