What is a key practice for mitigating phishing threats?

• A. Antivirus software
• B. Email filtering
• C. Data backup
• D. Password rotation

Answer: (B)

Email filtering acts as the frontline defense against phishing by preventing suspicious messages from reaching users. It analyzes inbound mail for indicators of phishing—such as spoofed domains, risky links, and malicious attachments—and blocks or flags those messages before anyone sees them. This direct prevention reduces the chance of credential theft or clicking harmful links. Antivirus can catch malware after an attachment is opened, data backups help with recovery after an incident, and rotating passwords doesn’t stop phishing messages from arriving or prevent credential theft when a user is tricked, so email filtering addresses the root risk most effectively.