Which of the following would be the BEST way to improve the metrics for the next exercise?

During a company-sponsored phishing exercise, more than 25%of the employees clicked on the link embedded in the message. Of the employees who clicked the link, 75%then entered their user credentials on the website provided.

Which of the following would be the BEST way to improve the metrics for the next exercise?
A . Implement stringent mail filters and controls at the mail gateway to prevent phishing messages from reaching employees. Block the website contained in the phishing message on the proxy to prevent
B . employees from entering their credentials
C . Increase the complexity requirements for employee passwords and deactivate inactive accounts to reduce the attack surface
D . Provide security awareness training focused on identifying and responding to phishing messages

Answer: A