CompTIA SecurityX (CAS-005) CAS-005 — Question 345

A company in a regulated industry experiences a data breach after an employee clicks on an email phishing link and enters credentials, leading to the exposure of sensitive information. Which of the following should the company do to prevent future attacks? (Choose two.)