A company has migrated to two-factor authentication for accessing the corporate network, VPN, and SSO. Several legacy applications cannot support multifactor authentication and must continue to use usernames and passwords. Which of the following should be implemented to ensure the legacy applications are as secure as possible while ensuring functionality? a. Privileged accounts
b. Password reuse restrictions
c. Password complexity requirements
d. Password history
e. Password recovery
f. Account disablement