An organization uses SSO authentication for employee access to
network resources. When an employee resigns, as per the
organization's security policy, the employee's access to all network
resources is terminated immediately. Two weeks later, the former
employee sends an email to the help desk for a password reset to
access payroll information from the human resources server.
Which of the following represents the BEST course of action?

Approve the former employee's request, as a password reset would give the former employee access to only t human resources server.
Deny the former employee's request, since the password reset request came from an external email address.
Deny the former employee's request, as a password reset would give the employee access to all network resources.
Approve the former employee's request, as there would not be a security issue with the former employee gaini access to network.