100-140 Question 336
Select 3A company’s IT support team receives reports that several employees have clicked on a phishing email, potentially exposing sensitive login credentials. What preventive measures should the IT team take to minimize the risk of such incidents in the future?
- A
Implement multi-factor authentication (MFA) for all employee accounts.
- B
Educate employees on recognizing phishing emails through security awareness training.
- C
Disable email attachments and links to prevent phishing attempts.
- D
Regularly update and patch the company’s software to address vulnerabilities.
- E
Deploy an email filtering solution to detect and block phishing emails.
Show answer and explanation
Correct answers: A, B, E
Explanation
Phishing attacks are a common threat that can compromise sensitive information. To minimize the risk, IT teams should focus on preventive measures such as deploying MFA, providing security awareness training, and using email filtering solutions. These measures collectively reduce the likelihood of successful phishing attempts while maintaining operational efficiency.
- A. Correct.
Implementing multi-factor authentication (MFA) adds an additional layer of security, ensuring that even if credentials are compromised, access to accounts is still protected.
- B. Correct.
Educating employees through security awareness training helps them recognize and avoid phishing attempts, reducing the likelihood of future incidents.
- C. Incorrect.
Disabling email attachments and links is not a practical solution for most organizations, as it would hinder productivity and communication.
- D. Incorrect.
While updating and patching software is critical for addressing vulnerabilities, it does not directly prevent phishing attacks, which rely on social engineering tactics.
- E. Correct.
Deploying an email filtering solution helps detect and block phishing emails before they reach employees, significantly reducing the risk.