How is SMTP VRFY EXPN used for email user enumeration

Question

SMTP commands like VRFY and EXPN can be used to verify valid email addresses on a mail server. How do attackers exploit these commands for email user enumeration, and how can it be mitigated?