Email Monitoring

Question 1

Unsolicited and unwanted junk email sent out in bulk to an indiscriminate
recipient list

Answer 1

Spam

Question 2

The fraudulent practice of sending emails purporting to be from reputable
companies in order to induce individuals to reveal personal information, such as
passwords and credit card numbers

Answer 2

Phishing

Question 3

A form of social engineering in which an individual lies and provides a false motive
to obtain privileged data

Answer 3

Pretext

Question 4

An email spoofing attack targeting a specific organization or individual by seeking
unauthorized access to sensitive information

Answer 4

Spear Phishing

Question 5

An attack in which an adversary successfully assumes the
identity of one of the legitimate parties in a system or in a
communications protocol

Answer 5

Impersonation

Question 6

An impersonation attack in which the attacker gains control of an employee’s
account and uses it to convince other employees to perform fraudulent actions

Answer 6

Business Email Compromise (BEC)

Question 7

A record of the email servers involved in transferring an email message from a
sender to a recipient

Answer 7

Email Header Analysis

Question 8

An attacker must also craft some sort of payload to complete the exploit when a victim
opens a message

Answer 8

Email Content Analysis

Question 9

Allows a body of an email to support different formats, such as HTML, rich text
format (RTF), binary data encoded as Base64 ASCII characters, and attachments

Answer 9

Multipurpose Internet Mail Extensions (MIME)

Question 10

An exploit or attachment that contains some sort of malicious code implemented
within the message body

Answer 10

Malicious Payload

Question 11

Message data contains scripts or objects that target some vulnerability
in the mail client

Answer 11

Exploit

Question 12

Message contains a file attachment in the hope that the user will
execute or open it

Answer 12

Attachment

Question 13

A link can be composed of a friendly string plus the URL or a shortened URL to
hide the identity of the real target

Answer 13

Embedded Link

Question 14

Spoofing attacks can be mitigated by configuring authentication for email server systems

Answer 14

Email Server Security

Question 15

DNS record identifying hosts authorized to send mail for the domain with only
one being allowed per domain

Answer 15

Sender Policy Framework (SPF)

Question 16

Provides a cryptographic authentication mechanism for mail utilizing a public key
published as a DNS record

Answer 16

DomainKeys Identified Mail (DKIM)

Question 17

A framework for ensuring proper application of SPF and DKIM utilizing a policy
published as a DNS record
DMARC can use either SPF or DKIM or both

Answer 17

Domain-Based Message Authentication, Reporting, and Conformance (DMARC)

Question 18

A Domain Name System (DNS) domain that looks similar to another name when
rendered by a Mail User Agent (MUA)

Answer 18

Cousin Domains

Question 19

SMTP logs are typically formatted in request/response fashion
o Time of request/response
o Address of recipient
o Size of message
o Status code

Answer 19

SMTP Log Analysis

Question 20

An email encryption standard that adds digital signatures and public key
cryptography to traditional MIME communications

Answer 20

Secure/Multipurpose Internet Mail Extensions (S/MIME)