A team removes malware but leaves the stolen service credential unchanged. What response gap remains?

1. Network encryption will automatically revoke that account
2. The attacker may retain access through the compromised credential
3. The credential becomes safe because no executable remains
4. All future logins become automatically legitimate