CAS-004 practice question 28 of 35

A security administrator wants to detect a potential forged sender claim in tt-e envelope of an email. Which of the following should the security administrator implement? (Select TWO).

Full set: 610 questions
Answer options
A: MX record
B: DMARC Correct answer
C: SPF Correct answer
D: DNSSEC
E: S/MIME
F: TLS
Correct Answer:
B. DMARC; C. SPF
Explanation

DMARC (Domain-based Message Authentication, Reporting and Conformance) and SPF (Sender Policy Framework) are two mechanisms that can help detect and prevent email spoofing, which is the creation of email messages with a forged sender address. DMARC allows a domain owner to publish a policy that specifies how receivers should handle messages that fail authentication tests, such as SPF or DKIM (DomainKeys Identified Mail). SPF allows a domain owner to specify which mail servers are authorized to send email on behalf of their domain. By checking the DMARC and SPF records of the sender’s domain, a receiver can verify if the email is from a legitimate source or not. Verified Reference: https://en.wikipedia.org/wiki/Email_spoofing https://en.wikipedia.org/wiki/DMARC https://en.wikipedia.org/wiki/Sender_Policy_Framework

Scroll to Top