A common root user account has been configured for a group of ESXi 6.x hosts. Which two steps should be taken to mitigate security risks associated with this configuration? (Choose two.)

The root account is a built-in system account on ESXi and cannot be removed; VMware does not support deleting the root user from a host.

Setting a complex, unique password for root and limiting its use reduces the blast radius if credentials are compromised and discourages casual shared use that leads to lack of accountability.

Joining ESXi hosts to Active Directory and assigning individual domain users the administrator role eliminates the need to share root credentials, provides per-user audit trails, and follows the principle of least privilege.

Lockdown Mode restricts all direct host access broadly rather than specifically limiting root account usage, and enabling it could block legitimate administrative workflows without addressing the shared-credential root cause.