A user receives an unexpected call asking for their password to resolve an urgent account issue. What is the best response?

1. Decline to disclose it and verify the request through the official support channel
2. Send the password by text instead of speaking it
3. Approve any MFA prompt to let the caller investigate
4. Read the password aloud if the caller knows the user's department