An employee receives a password reset link via email that appears to be from the company's IT department. The link directs to a website that asks for the employee's current password before granting access to a new one. What is the most secure course of action?
Want adaptive practice that measures your real level?