A Systems Administrator Has Been Assigned to Create Accounts for Summer

A systems administrator has been assigned to create accounts for summer interns. The interns are only authorized to be in the facility and operate computers under close supervision. They must also leave the facility at designated times each day. However, the interns can access intern file folders without supervision. Which of the following represents the BEST way to configure the accounts? (Choose two.)

A) Implement time-of-day restrictions.
B) Modify archived data.
C) Access executive shared portals.
D) Create privileged accounts.
E) Enforce least privilege.