During a security awareness tabletop, a bank fraud team lead asks: 'If we receive a wire transfer request by email that includes a voice memo attached from the requester saying it is urgent, what is our verification standard?' Which answer reflects best practice?

• A.A voice memo from the requester authenticates the request if the voice matches recordings on file
• B.Voice memos in emails provide no identity assurance; the verification standard is an out-of-band callback to a pre-registered phone number in the vendor master file before approving any change to payment instructions
• C.Voice memos combined with the requester's email domain provide two-factor authentication for payment approval
• D.Verify the email DKIM signature and voice memo together; if both pass, approve the transfer