In the scenario where a Linux system has multiple services running, which of the following actions is the BEST practice to secure the corresponding service accounts?
Setting a strong, unique password for each service account.
Changing the home directory permissions of service accounts to 700.
Configuring PAM modules to limit the access times for service accounts.
Changing the default shell of the service accounts to /bin/nologin
.