A cloud identity has been compromised. Its password was reset, but investigators are concerned about active sessions and other access paths. What is the best next approach?

1. Revoke supported sessions and review additional credentials and access under the response plan
2. Reset unrelated employees' passwords instead
3. Assume every existing token becomes unusable immediately everywhere
4. Remove the user from a dashboard only