After a Recent Breach, an Organization Determined That Phishing Was

Multiple Choice

After a recent breach, an organization determined that phishing was used to gain initial access to the network before regaining persistence. The information gained from the phishing attack was a result of users visiting known malicious websites. What must be done in order to prevent this from happening in the future?

A) Modify web proxy settings.
B) Modify outbound malware scanning policies.
C) Modify identification profiles.
D) Modify an access policy.