John, a security specialist, has conducted a session to make the employees of his organization aware of the actions that can pose a security threat by allowing malicious content to download without the user's knowledge or consent. Which of the following actions leads to such a situation?