An administrator notices that former temporary employees’ accounts are still active on a domain.
Which of the following can be implemented to increase security and prevent this from happening?

A.
Implement a password expiration policy.

B.
Implement an account expiration date for permanent employees.

C.
Implement time of day restrictions for all temporary employees.

D.
Run a last logon script to look for inactive accounts.

Explanation:
You can run a script to return a list of all accounts that haven’t been used for a number of days, for example 30
days. If an account hasn’t been logged into for 30 days, it’s a safe bet that the user the account belonged to is
no longer with the company. You can then disable all the accounts that the script returns. A disabled account
cannot be used to log in to a system. This is a good security measure. As soon as an employee leaves the
company, the employees account should always be disabled.