During a recent audit, it was discovered that several user accounts belonging to former employees were still active and had valid VPN permissions. Which of the following would help reduce the amount o

Time-of-day restrictions limit when an active account can be used but do not address the fundamental issue of why a former employee's account remains active with valid permissions.

User access reviews are a formal, periodic process to re-evaluate who has access to specific resources and why. By conducting these reviews regularly, an organization can identify and remove access for inactive accounts, such as those belonging to former employees, thereby preventing unauthorized access and reducing the risk of security breaches related to stale permissions.

Group-based privileges simplify access management by assigning permissions to groups, but they do not inherently ensure that users who leave the organization are removed from these groups or that their accounts are disabled.

Change management policies govern the process of implementing controlled changes to IT systems and configurations, not the routine auditing and deactivation of user accounts based on employment status changes.