A tester was able to leverage a pass-the-hash attack during a recent penetration test. The tester gained a foothold and moved laterally through the network. Which of the following would prevent this type of attack from reoccurring?

1. Renaming all active service accounts and disabling all inactive service accounts
2. Creating separate accounts for privileged access that are not used to log on to local machines
3. Enabling full-disk encryption on all workstations that are used by administrators and disabling RDP
4. Increasing the password complexity requirements and setting account expiration dates.