A security administrator wants to prevent users in sales from accessing their servers after 6:00m., and prevent them from accessing accounting’s network at all times. Which of the following should the administrator implement to accomplish these goals? (Select TWO).

A.
Separation of duties

B.
Time of day restrictions

C.
Access control lists

D.
Mandatory access control

E.
Single sign-on