Which of the following controls mitigates the risk of Matt, an attacker, gaining access to a company
network by using a former employee’s credential?

A.
Account expiration

B.
Password complexity

C.
Account lockout

D.
Dual factor authentication

Explanation:
Account expiration is a secure feature to employ on user accounts for temporary workers, interns,
or consultants. It automatically disables a user account or causes the account to expire at a
specific time and on a specific day.