Updating wire transfer processes to include verification steps (such as requiring dual approval or verifying account changes via a secondary communication method) canprevent fraudulenttransactions. Attackers often use business email compromise (BEC) or pretexting to trick employees into transferring funds to fraudulent accounts.
Standardizing security incident reportingis useful for tracking security events but does not prevent fraud in real time.
Executing regular phishing campaignsimproves awareness but does not enforce a verification process for financial transactions.
Implementing insider threat detectionfocuses on internal risks but does not specifically prevent external fraud.
Amore secure wire transfer processwith additional verification steps is the most effective measure against fraudulent transactions.

Input validation is most directly used to reduce prompt injection attacks against AI chatbots. Prompt injection occurs when a user enters crafted instructions designed to override, bypass, or manipulate the chatbot's intended system instructions. By validating, filtering, constraining, and sanitizing user input, an organization can prevent malicious instructions from being interpreted as trusted commands. Model manipulation is broader and may include poisoning or adversarial techniques beyond simple input validation. Bias is mainly addressed through training data governance, testing, and model evaluation. Hallucinations are inaccurate or fabricated AI outputs, usually reduced through grounding, retrieval controls, and output verification.
Therefore, for a chatbot, input validation best maps to preventing prompt injection.

The correct answer is A. Implement regular account reviews.
This scenario describes privilege creep, which occurs when users accumulate permissions over time as they change roles, departments, or responsibilities. Regular account reviews help ensure users have only the access required for their current job duties.
This supports the principle of least privilege, which is a key CompTIA Security+ SY0-701 identity and access management concept.
Why the other options are incorrect:
B . Provide privileged user account training
Training is useful, but it does not remove unnecessary privileges.
C . Require a jump box for privileged account use
A jump box can control administrative access to sensitive systems, but it does not solve the issue of users retaining excessive privileges.
D . Apply more restrictive security baselines
Security baselines harden systems and configurations, but they do not directly review or remove unnecessary user permissions.
Therefore, the best answer is regular account reviews.

Sanitization is the process of thoroughly removing or wiping all data from devices before disposal or donation to prevent sensitive information from being recovered or leaked.
Reference:
CompTIA Security+ SY0-701 Official Study Guide, Domain 4.4: "Sanitization is used to ensure data cannot be recovered from donated or decommissioned equipment." Exam Objectives 4.4: "Summarize business continuity and disaster recovery concepts."