CSCU Email Communication Security 2 — Questions and Answers
Question 1: What is the primary purpose of email encryption?
- To speed up email delivery
- To ensure only the intended recipient can read the email content (Correct answer)
- To reduce the size of email attachments
- To prevent emails from being marked as spam
Correct answer: To ensure only the intended recipient can read the email content
Email encryption converts email content into an unreadable format that can only be decrypted by the intended recipient, protecting the confidentiality of the message.
Email encryption uses cryptographic algorithms to transform readable email content (plaintext) into an unreadable format (ciphertext) that can only be decrypted by the intended recipient who possesses the correct decryption key. Without encryption, emails travel across the internet in a format that can potentially be intercepted and read by anyone with access to the network infrastructure. Common email encryption standards include S/MIME (using digital certificates) and PGP/GPG (using public-private key pairs). End-to-end encryption ensures that even the email service provider cannot read the message content, providing the highest level of email confidentiality.
Question 2: Which type of email attack uses a fabricated sense of urgency to trick recipients into taking immediate action?
- Spam email
- Social engineering through urgency-based phishing (Correct answer)
- Email forwarding
- Mailing list abuse
Correct answer: Social engineering through urgency-based phishing
Urgency-based phishing emails create artificial time pressure—such as threatening account suspension or missed deadlines—to override the recipient's critical thinking and prompt hasty action.
Urgency-based phishing is a social engineering technique where attackers craft emails that create a fabricated sense of immediate action needed. Common tactics include warnings about account suspension, fake security alerts, expiring offers, or impersonating authority figures demanding immediate compliance. The urgency is designed to bypass the recipient's rational decision-making process—when people feel rushed, they are less likely to verify the legitimacy of the request. Red flags include demanding immediate action, threatening negative consequences, unusual sender addresses, and requests for sensitive information. Always pause and verify through a separate, trusted communication channel before responding to urgent email requests.
Question 3: What does SPF (Sender Policy Framework) do for email security?
- Encrypts email content end-to-end
- Specifies which mail servers are authorized to send email for a domain (Correct answer)
- Scans email attachments for viruses
- Blocks spam emails automatically
Correct answer: Specifies which mail servers are authorized to send email for a domain
SPF is a DNS-based email authentication protocol that allows domain owners to specify which mail servers are authorized to send emails on behalf of their domain, helping prevent email spoofing.
Sender Policy Framework (SPF) is an email authentication protocol that allows domain owners to publish a DNS TXT record specifying which IP addresses and mail servers are authorized to send email on behalf of their domain. When a receiving mail server gets an email, it can check the SPF record of the sender's domain to verify the sending server is authorized. If the sending server is not listed, the email may be rejected or flagged as suspicious. SPF helps combat email spoofing—where attackers forge the 'From' address to impersonate legitimate domains. SPF works alongside DKIM and DMARC to form a comprehensive email authentication framework.
Question 4: Why should you be cautious about clicking links in emails, even from known contacts?
- Links in emails always contain viruses
- The sender's email account may have been compromised and used to send malicious links (Correct answer)
- Clicking links uses excessive internet bandwidth
- Email links expire after 24 hours
Correct answer: The sender's email account may have been compromised and used to send malicious links
Even emails from known contacts can contain malicious links if the sender's account has been hacked, making it important to verify unexpected links before clicking.
Emails appearing to come from known contacts can contain malicious links for several reasons: the sender's email account may have been compromised by an attacker, the sender's address may be spoofed (forged), or the contact's device may be infected with malware that automatically sends malicious emails from their account. Attackers specifically exploit trust relationships—people are far more likely to click links from people they know. Best practices include hovering over links to preview the actual URL before clicking, verifying unexpected messages through a different communication channel, being suspicious of messages that seem out of character for the sender, and keeping security software updated to catch known malicious URLs.
Question 5: What is the purpose of a digital signature in email?
- To add a decorative signature block at the end of an email
- To verify the identity of the sender and ensure the message has not been altered (Correct answer)
- To compress email attachments
- To automatically reply to incoming emails
Correct answer: To verify the identity of the sender and ensure the message has not been altered
A digital signature uses cryptographic techniques to verify the sender's identity and confirm that the email content has not been modified during transit.
A digital signature in email is a cryptographic mechanism that serves two critical purposes: authentication (verifying the identity of the sender) and integrity (confirming the message has not been altered since it was sent). The sender uses their private key to create a unique signature based on the message content. The recipient uses the sender's public key to verify the signature. If the message has been modified in any way, the signature verification fails. Digital signatures are implemented through standards like S/MIME and PGP. Unlike a simple text signature block, digital signatures provide mathematically verifiable proof of authorship and message integrity, making them legally binding in many jurisdictions.
Question 6: What should you do before opening an unexpected email attachment?
- Open it immediately to see what it contains
- Forward it to all colleagues to check if they received the same attachment
- Verify the attachment's legitimacy with the sender through a separate communication channel (Correct answer)
- Download it and rename the file extension
Correct answer: Verify the attachment's legitimacy with the sender through a separate communication channel
Before opening unexpected attachments, you should verify with the sender through a different channel (phone, text, in-person) to confirm they intentionally sent the file.
Unexpected email attachments are a primary vector for malware delivery, including ransomware, trojans, and spyware. Before opening any unexpected attachment, best practice is to verify its legitimacy by contacting the apparent sender through a separate communication channel—such as a phone call, text message, or in-person conversation. Do not reply to the email itself, as the attacker controls that communication channel. Additional precautions include checking the file extension (be wary of .exe, .scr, .zip, .js, and macro-enabled Office files), scanning the attachment with updated antivirus software, and opening suspicious files in a sandboxed environment. When in doubt, delete the email and contact the sender independently.
CSCU Email Communication Security 2
What is the primary purpose of email encryption?