Susan wants to reduce the likelihood of successful credential harvesting attacks via her organization's commercial websites. Which of the following is not a common prevention method aimed at stopping credential harvesting?

Use of multifactor authentication

User awareness training

Use of complex usernames

Limiting or preventing use of third$-$party web scripts and plugins