How can you make it much harder for a hacker to gain access to an account through random password guesses?

a$.)$

Automatically locking out accounts after a a few unsuccessful attempts

b$.)$

Using LDAP

c$.)$

Requiring users to change passwords every $30$ days

d$.)$

Using single sign$-$on