Shela is worried that some users in her network might be accessing files that are unnecessary for their current job responsibilities. Which of the following options would be the MOST effective approach to determine if this is occurring?

The most effective approach to determine if users are accessing unnecessary files is to audit and review how they are utilizing their account permissions. For instance, a bank loan officer has access to loan documents due to the nature of their job, but they should not be accessing loan documents for loans they are not servicing. In this case, the problem is not with permissions since the users require permission to access the data. The problem is with how the users are using their permissions. Account maintenance includes both usage auditing and permissions auditing, but auditing and review is the optimal solution. Lastly, this is not a policy matter.