After a merger, it was determined that several individuals could perform the tasks of a network administrator in the merged organization. Which of the following should have been performed to ensure…

Time-of-day restrictions control when users can access resources but do not address what resources they can access or their level of privilege.

Change management is a process for controlling changes to IT services and infrastructure, which is too broad and does not directly specify the action for reviewing user access levels.

Periodic auditing of user credentials focuses on the security and validity of passwords and account existence, not on the appropriateness of the permissions assigned to those accounts based on job roles.

After a merger, job roles and responsibilities often change, making it critical to review user rights and permissions to ensure that each employee's access aligns precisely with their new job function. This process directly addresses potential over-privileging, adhering to the principle of least privilege by granting only the necessary access for assigned tasks.