What is phishing, and what steps can be taken to prevent it?

Since this is a hybrid technical and operational question, your answer should begin by defining phishing and then describing the countermeasures you use to prevent it. Keep your answer brief and to the point, and use simple, easy-to-understand language. As with any technical or operational question, be prepared for a follow-up question.

"Phishing is a type of cyberattack in which a hacker disguises themselves as a trustworthy user and attempts to obtain proprietary information using a fraudulent email or instant message request. The best way to prevent phishing attacks is to educate the users about these and provide them with a set of best practices they can use when accessing the internet. These include not entering sensitive information on the web pages they are unfamiliar with and verifying a user's identity or a website's security. Cybersecurity professionals can prevent phishing attacks by using firewalls and antivirus software."