The employees at XYZ Corporation have recently undergone security training to identify potential phishing attempts. One of the staff members received an email from '[email protected]', requesting immediate password verification due to a system update. The email provided a link to a web form for password entry. What is the most appropriate course of action for the employee to take to ensure network security?
Contact the IT department using a known, official phone number or internal communication system to verify the request.
Ignore the email as it's likely spam, and delete it from the inbox without reporting it.
Immediately follow the link and enter the password, as the request appears to originate from a legitimate email address.
Reply to the email asking for further details to confirm the authenticity of the request.