CompTIA A+ 220-902 Question I-70

An administrator is concerned about users accessing network shares outside of their job role. Which of the following would BEST prevent this?

A. Set up shares with permissions based upon group membership.
B. Implement a written policy addressing the issue for all users.
C. Monitor access to the network shares using SNMP.
D. Prevent remote logins to all network shares and drives.