CSCU Email Communication Security 3

Question 1

What is DMARC and how does it improve email security?

Accepted Answer

A protocol that builds on SPF and DKIM to specify how receiving servers should handle failed authentication

Answer

DMARC (Domain-based Message Authentication, Reporting, and Conformance) tells receiving mail servers what to do when emails fail SPF or DKIM checks, and provides reporting on authentication results.

Question 2

What is business email compromise (BEC)?

Accepted Answer

A targeted scam where attackers impersonate executives or business partners to trick employees into transferring money or sensitive data

Answer

BEC is a sophisticated scam where criminals impersonate company executives, business partners, or vendors through email to trick employees into making wire transfers or revealing confidential information.

Question 3

Why is it risky to use public Wi-Fi for checking email without a VPN?

Accepted Answer

Attackers on the same network can potentially intercept email credentials and content

Answer

On unsecured public Wi-Fi networks, attackers can use packet sniffing or man-in-the-middle techniques to intercept email credentials and message content.

Question 4

What is email header analysis and why is it useful for security?

Accepted Answer

Examining the technical metadata of an email to trace its origin and verify authenticity

Answer

Email header analysis involves examining the technical metadata (routing information, authentication results, originating IP addresses) to determine the true origin of an email and identify potential spoofing.

Question 5

What is the security risk of auto-forwarding rules in email accounts?

Accepted Answer

Attackers can set up hidden forwarding rules to silently receive copies of all incoming emails

Answer

If an attacker gains temporary access to an email account, they can create hidden auto-forwarding rules that silently send copies of all incoming messages to an external address, maintaining persistent access to communications.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Email Communication Security 3