A system administrator has concerns regarding their users accessing systems and secured areas using others' credentials. Which of the following can BEST address this concern?

A conduct policy is an administrative control that relies on user compliance and cannot technically prevent credential sharing from occurring.

Shortening expiration reduces the window of exposure if credentials are shared but does not prevent the sharing behavior itself.

Biometric readers - such as fingerprint scanners or facial recognition on laptops and door access systems - authenticate based on who you are, not what you know or have. Because biometric traits are inherently personal and non-transferable, implementing them directly eliminates the ability of one user to present another user's credentials. This makes biometrics the strongest technical control against credential sharing compared to policy or procedural controls.

Security cameras are a detective control that may deter or identify sharing after the fact but do not technically prevent it.