An employee changes jobs internally and accumulates privileges from both roles. What best addresses the cause?

1. Stronger passwords without changing permissions
2. Role-transition access removal and periodic recertification
3. Duplicating the employee's account in every directory
4. Longer login sessions