What should users be cautious about regarding emails that appear to be from legitimate companies?

• A. Click the link in the email to verify your credentials.
• B. Reply to the email asking for verification.
• C. Legitimate companies do not ask users to revalidate their credentials via email; users should go directly to the company's website instead.
• D. Forward the email to IT as a security concern.

Answer: (C)