Two-factor authentication is the best protection against any of those, plus so much more. I'll explain what it is and why you should enable it whenever possible. Sometimes called 2-factor ...
The various versions of Windows have used Kerberos as its main authentication protocol for over 20 years. However, in certain circumstances, the OS has to use another method, NTLM (NT LAN Manager).