Which Continuous Diagnostics and Mitigation $($CDM$)$ capability provides organizations with insight into risks associated with authorized users being granted excessive privileges to systems and information at any level of sensitivity$?$

$1.$

The CDM CRED $($credentials and authenticators$)$ capability provides organizations with insight into risks associated with authorized users being granted excessive privileges to systems and information at any level of sensitivity$?$

$2.$

The CDM PRIV $($Control of Account $/$ Access $/$ Managed Privileges$)$ capability provides organizations with insight into risks associated with authorized users being granted excessive privileges to systems and information at any level of sensitivity$?$

$3.$

The CDM BEHAVE $($Security Related Behavioral Training $)$ capability provides organizations with insight into risks associated with authorized users being granted excessive privileges to systems and information at any level of sensitivity$?$

$4.$

The CDM TRUST $($Trust Determination for People Granted Access $)$ capability provides organizations with insight into risks associated with authorized users being granted excessive privileges to systems and information at any level of sensitivity$?$