What are three best practices to avoid falling for a phishing attack?

a) Click on links in suspicious emails
b) Verify sender's identity
c) Ignore security warnings
d) Keep software updated