Which of the following would be the FIRST step to take to mitigate the threat of non-essential domain accounts?

Which of the following would be the FIRST step to take to mitigate the threat of non-essential
domain accounts?

A.
Develop a security policy

B.
Rename the system administrator account

C.
Review the domain accounts

D.
Write an LDAP query.