A security analyst is researching ways to improve the security of a company's email system to mitigate emails that are impersonating company executives. Which of the following would be BEST for the analyst to configure to achieve this objective?
In a nutshell, SPF allows email senders to define which IP addresses are allowed to send mail for a particular domain. DKIM on the other hand, provides an encryption key and digital signature that verifies that an email message was not forged or altered.
DMARC (domain-based message authentication, reporting, and conformance) and DKIM (domain keys identified mail) are configurations that are performed on a DNS server to verify whether email being sent by a third-party is verified to send it on behalf of the organization.
C. If an attacker tries to impersonate an email address from a domain that has implemented DKIM, the digital signature will not match the public key in the DNS records, and the email will be flagged as suspicious or rejected by the recipient's email server.
Sender Policy Framework (SPF) uses a DNS record published by an organization hosting email service. The SPF record—there must be only one per domain—identifies the hosts authorized to send email from that domain.
VS
DomainKeys Identified Mail (DKIM) provides a cryptographic authentication mechanism. This can replace or supplement SPF.
SPF lets you authorize senders that are allowed to send email on behalf of your domain. DKIM signs every outgoing message with your unique signature, so receiving servers can verify the message came from you. SPF and DKIM let receiving servers verify that messages that appear to be from your domain are legitimate.
This section is not available anymore. Please use the main Exam Page.CS0-002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ThisGuyStillLearning
Highly Voted 2 years, 9 months agoRobV
Most Recent 1 year, 6 months agobuchhe
1 year, 10 months ago2Fish
2 years, 3 months agoabsabs
2 years, 4 months agoTeyMe
2 years, 8 months agoR00ted
2 years, 9 months agoamateurguy
2 years, 9 months agoLaudy
2 years, 10 months agoLaudy
2 years, 10 months agoLaudy
2 years, 10 months ago