A security analyst is investigating a suspected security breach and discovers the following in the logs of the potentially compromised server: Which of the following would be the BEST method for preve

Password expirations ensure passwords are changed periodically but do not prevent an attacker from guessing the current password through repeated attempts before it expires.

Restrictions on shared credentials improve accountability and reduce the attack surface by preventing multiple users from using a single account, but they do not specifically prevent brute-force attacks on individual accounts.

Account lockout settings directly prevent brute-force and password guessing attacks by automatically disabling an account after a specified number of failed login attempts. This thwarts attackers who try to gain unauthorized access by systematically testing numerous password combinations against a user account.

Time-of-day restrictions limit when users can log in but do not prevent an attacker from making repeated password guesses during permitted login windows.