While performing disk and file maintenance on the company file server, you determine a user in the accounting department has been accidentally saving documents to all shared folders on the file server. The user’s computer was recently passed to her from another user in the company, and according to company policy, the user should have access only to the accounting share.

Which of the following best describes this situation?

A. The user bypassed the security of the file server.
B. The principle of least privilege was not followed.
C. The firewall on the server is disabled.
D. The firewall on the user’s computer is disabled.