The local administrator account for a company's VPN appliance was unexpectedly used to log in to the remote management interface. Which of the following would have prevented this from happening?


A. Using least privilege
B. Changing the default password
C. Assigning individual user IDs
D. Implementing multifactor authentication