A company’s password and authentication policies prohibit the use of shared passwords and transitive trust.
Which of the following if implemented would violate company policy? (Choose two.)

A.
Discretionary access control

B.
Federation

C.
Single sign-on

D.
TOTP

E.
Two-factor authentication