A cоmpаny discоvers thаt аn emplоyee received an email that looked like it came from the IT department. The email asked the employee to click a link and enter their username and password. a) Identify the type of attack. b) Identify the type of vulnerability involved. c) Which preventive control could add an extra layer of verification if the employee’s password is stolen?