a$,$ b$,$ c$,$d or e$?$

$44.$ Which of the following actions by a company has the least impact in reducing the risk of a social engineering?

a$.$ Asking an information security company to send test spear$-$phishing emails to staff.

b$.$ Publicising the security policy on a Teams channel.

c$.$ Discussing with staff the real$-$life consequences of a social engineering attack on a victim who does not work at the company.

d$.$ Discussing with staff the real$-$life consequences of a social engineering attack on a victim who does work at the company.

e$.$ Conducting staff training on social engineering.