Which set of measures is identified as helping organizations prevent phishing attacks and protect data?

### Why this is right The material identifies multi-factor authentication, user education, and email filtering as phishing mitigations. These measures address account access, human recognition of deceptive messages, and the delivery of harmful email. ### The concept A control is a measure used to reduce the chance or impact of a threat. Multi-factor authentication requires an additional proof of identity beyond a password. User education helps people recognize suspicious requests. Email filtering can block or flag harmful messages before they reach users. Controls work in different ways, so combining them can address more than one point in the attack path. ### The other options - **B. Load balancing, scalable infrastructure, and traffic filtering**: these measures are listed for reducing DDoS effects, not as the phishing-control set. - **C. Version control, peer reviews, and automated deletion**: version control and peer review can reduce file-management risks, but automated deletion would not prevent phishing. - **D. Encryption, transaction logs, and ransomware payments**: encryption and logs can protect data, but paying a ransom is not listed as a phishing-prevention measure. ### Terms - **Multi-factor authentication**: an authentication method that requires more than one type of proof of identity. ### Remember Match a control to the point of risk it addresses: people, messages, credentials, data, or service capacity.