Email Communication Security Flashcards

What is DMARC and how does it improve email security?

Answer: A protocol that builds on SPF and DKIM to specify how receiving servers should handle failed authentication

DMARC (Domain-based Message Authentication, Reporting, and Conformance) tells receiving mail servers what to do when emails fail SPF or DKIM checks, and provides reporting on authentication results.

What is business email compromise (BEC)?

Answer: A targeted scam where attackers impersonate executives or business partners to trick employees into transferring money or sensitive data

BEC is a sophisticated scam where criminals impersonate company executives, business partners, or vendors through email to trick employees into making wire transfers or revealing confidential information.

Why is it risky to use public Wi-Fi for checking email without a VPN?

Answer: Attackers on the same network can potentially intercept email credentials and content

On unsecured public Wi-Fi networks, attackers can use packet sniffing or man-in-the-middle techniques to intercept email credentials and message content.

What is email header analysis and why is it useful for security?

Answer: Examining the technical metadata of an email to trace its origin and verify authenticity

Email header analysis involves examining the technical metadata (routing information, authentication results, originating IP addresses) to determine the true origin of an email and identify potential spoofing.

What is the security risk of auto-forwarding rules in email accounts?

Answer: Attackers can set up hidden forwarding rules to silently receive copies of all incoming emails

If an attacker gains temporary access to an email account, they can create hidden auto-forwarding rules that silently send copies of all incoming messages to an external address, maintaining persistent access to communications.

What precaution should be taken when sending sensitive information via email?

Answer: Use end-to-end encryption or send sensitive data through a secure file-sharing platform instead

Sensitive information should be protected with end-to-end encryption or shared through a secure platform, as standard email provides limited security for confidential data.