Security Operations: Examine Email Security

Question 1

What are the types of email security available today?

Answer 1

S/MIME
Digital Signature
DLP
Email Gateway
DMARC
- DKIM
Sender Policy Framework

Question 2

What is S/MIME?

Answer 2

S/MIME: A method for securing email messages with encryption and digital signatures, thereby helping to ensure the confidentiality, integrity, and authenticity of email communication.

Popular in the Microsoft world

Question 3

What is digital signature?

Answer 3

Digital signature: A cryptographic method used to verify authenticity and integrity of digital files and messages to ensure they haven’t been tampered with and were created by a legitimate sender.

Question 4

What are the benefits of DLP?

Answer 4

DLP: A comprehensive strategy and tools that help organizations identify, monitor, and protect data from unauthorized access, sharing, or leakage, ensuring data security and compliance with regulatory requirements.

Question 5

What does email gateway do in terms of security?

Answer 5

Email gateway: A dedicated server or software component that acts as an intermediary between an organization’s internal email infrastructure and the external internet. It provides a protective barrier by filtering, scanning, and monitoring incoming and outgoing email traffic.

Question 6

What does DMARC use for additional authentication?

Answer 6

Domain-based Message Authentication Reporting and Conformance (DMARC): An email authentication, policy and reporting protocol that helps organizations prevent email spoofing and phishing attacks by verifying sender identities and specifying how to handle unauthenticated messages. It uses:

DomainKeys Identified Mail (DKIM): An email authentication method that adds a digital signature to outgoing emails. This allows email recipients to verify the authenticity and integrity of the sender’s domain and the message content.

Encrypt to server then server sends a digital signature – recipient can only reverse it using a private key