Which of the following is a common security practice to protect against…

Correct answer: User education and awareness training.

Explanation: Educating users about phishing techniques — including how to recognize suspicious emails, avoid malicious links and attachments, and verify unexpected requests for credentials or sensitive information — is a highly effective measure for preventing phishing attacks.

Why the other choices are not appropriate:

• Using weak passwords: Weak passwords make accounts easy to breach and do not defend against credential-based attacks.

• Disabling firewalls: Turning off firewalls reduces network protection and increases exposure to many types of attacks; it does not prevent phishing.

• Sharing login credentials: Sharing credentials creates unnecessary risk and removes accountability and auditing for user actions.

Recommended complementary practices:

• Use multi-factor authentication to reduce the impact of compromised credentials.

• Deploy email filtering and anti-phishing tools to block known malicious messages.

• Run regular phishing simulations and refresher training to keep awareness high.

• Encourage reporting of suspicious messages and keep software and security controls up to date.