A common root user account has been configured for a group of ESXi 6.x hosts. Which two steps should be taken to mitigate security risks associated with this configuration? (Choose two.)

The root account is a built-in system account on ESXi and cannot be removed or deleted, making this action technically impossible on any ESXi host.

Setting a complex password for the root account reduces the risk of brute-force or credential-guessing attacks, and limiting its use to emergency scenarios minimizes exposure of the shared credential across multiple hosts.

Configuring ESXi Active Directory integration and assigning named AD users the administrator role eliminates reliance on a shared root credential, provides per-user audit trails, and follows the principle of least privilege and individual accountability.

Lockdown Mode restricts how the host is managed (requiring vCenter Server as the management path) but does not address the credential-sharing risk or limit what the root account itself can do when accessed.