Yael’s organization has received a very convincing phishing email that has resulted in staff clicking on a malicious link. If Yael can’t remove the email from inboxes, which of the following options will allow her to quickly prevent users from being compromised?

Enabling DNS filtering based on the URL from the email is the most effective option listed. Disabling the organization’s Internet connection will result in additional disruption. Blocking the email’s source IP for an already received email will not be effective, nor will enabling reputation services for email after the email has already been received.