Which of the following mitigation strategies would be BEST to recommend in the report?

A penetration tester is able to move laterally throughout a domain with minimal roadblocks after compromising a single workstation.

Which of the following mitigation strategies would be BEST to recommend in the report? (Select THREE)
A . Randomize local administrator credentials for each machine
B . Disable remote logons for local administrators
C . Require multifactor authentication for all logins
D . ease minimum password complexity requirements
E . Apply additional network access control
F . Enable full-disk encryption on every workstation
G . Segment each host into its own VLAN

Answer: A B C