Several employees clicked on a link in a malicious message that bypassed the spam filter and
their PCs were infected with malware as a result. Which of the following BEST prevents this
situation from occurring in the future?

A.
Data loss prevention

B.
Enforcing complex passwords

C.
Security awareness training

D.
Digital signatures

Explanation:
Security awareness and training include explaining policies, procedures, and current threats to
both users and management. A security awareness and training program can do much to assist in
your efforts to improve and maintain security. Ideally, a security awareness training program for
the entire organization should cover the following areas:
Importance of security
Responsibilities of people in the organization
Policies and procedures
Usage policies
Account and password-selection criteria
Social engineering prevention