A network administrator has noticed unusual activity with a user's login credentials on the network. The user is attempting multiple simultaneous login across the network, some of which are attempting to access workstations and servers to which the user does not have access. Which of the following should the network administrator do NEXT?
A) Delete the user's AD account.
B) Decrease the user's AD privileges.
C) Disable the user's AD account.
D) Reset the password on the user's AD account.

Question

Quizplus · Accepted Answer

Disabling the user's AD account is the most immediate action to prevent further unauthorized access while investigating the issue.

A Network Administrator Has Noticed Unusual Activity with a User's