In social engineering risk scenarios, how should a TA protect user access?

• A. Rely only on strong passwords and ignore user education.
• B. Prohibit all external communications to users.
• C. Provide ongoing awareness training, implement multi-factor authentication, and enforce verification steps for sensitive actions.
• D. Grant access on first contact to reduce delays.

Answer: (C)