User awareness education is the most effective method for reducing phishing attacks. Training users to recognize suspicious emails, links, and attachments can prevent them from falling for phishing attempts.
Technical solutions like SMTP filtering (C) and restricting emails (D) can help but are not as effective without user vigilance. A BYOD policy (B) does not directly address phishing email threats.
Reference: Core 2, Domain 2.4 - Security measures and social engineering.

A rollback plan is essential for a change to be approved by a change management review board. It outlines the steps to reverse a change in case something goes wrong, minimizing downtime and mitigating risk. Other items like end-user acceptance and cost analysis are important but not typically the deciding factor for approval.
Reference: CompTIA A+ 220-1102 Exam Objectives, Domain 4.2 Operational Procedures - Change Management

RDP (Remote Desktop Protocol) is a protocol that allows a user to connect to and control a remote computer over a network. RDP can be used to perform Windows updates on a department's servers without physically accessing them.
Reference: CompTIA A+ Core 2 Exam Objectives, Section 5.6

Content filtering is a process that manages or screens access to specific emails or webpages based on their content categories1. Content filtering can be used by organizations to control content access through their firewalls and enforce corporate policies around information system management2. A SOHO client may have content filtering enabled on their network and may need to adjust it to allow access to a corporate website that is blocked by default. The client can use a software program, a hardware device, or a subscription service to configure the content filtering settings and whitelist the desired website2.
References: 1: Web content filtering (https://learn.microsoft.com/en-us/microsoft-365/security/defender- endpoint/web-content-filtering?view=o365-worldwide) 2: What is Content Filtering? Definition and Types of Content Filters (https://www.fortinet.com/resources/cyberglossary/content-filtering)

Instructing the user to disconnect the Wi-Fi is the first action the technician should take if they suspect a rogue access point. A rogue access point is an unauthorized wireless network that could be used to intercept or manipulate network traffic, compromise security, or launch attacks. Disconnecting the Wi-Fi would prevent further exposure or damage to the user's device or data. Restarting the wireless adapter, launching the browser, or running the antivirus software are possible actions to take after disconnecting the Wi-Fi, but they are not as urgent or effective as the first step. References:
* Official CompTIA learning resources CompTIA A+ Core 1 and Core 2, page 22
* CompTIA A+ Core 1 (220-1101) and Core 2 (220-1102) Cert Guide, page 456