Several employees clicked on a link in a malicious message that bypassed the spam filter and their PCs were
infected with malware as a result. Which of the following BEST prevents this situation from occurring in the
future?

A.
Data loss prevention

B.
Enforcing complex passwords

C.
Security awareness training

D.
Digital signatures

Explanation:
Security awareness and training include explaining policies, procedures, and current threats to both users and
management. A security awareness and training program can do much to assist in your efforts to improve and
maintain security. Ideally, a security awareness training program for the entire organization should cover the
following areas:
Importance of security
Responsibilities of people in the organization
Policies and procedures
Usage policies
Account and password-selection criteria
Social engineering prevention