Which of the following controls should the company consider using as part of its IAM strategy?

A nationwide company is experiencing unauthorized logins at all hours of the day. The logins appear to originate from countries in which the company has no employees .

Which of the following controls should the company consider using as part of its IAM strategy? (Select TWO).
A . A complex password policy
B . Geolocation
C . An impossible travel policy
D . Self-service password reset
E . Geofencing
F . Time-based logins

Answer: A,B