A court clerk drill plans to use SET for an authorized phishing-related simulation. Which deployment control is most appropriate?
Select an answer to reveal the explanation.
Short Explanation
SET belongs on the isolated court lab VLAN with pretend mail plumbing—not hitchhiking on live Exchange. Deleting messages later does not un-send risk. Realism comes from the drill design, not production blast radius.
Full Explanation
For a court clerk drill that plans to use SET for an authorized phishing-related simulation, the most appropriate deployment control is to run SET only on isolated VLANs with fake mail relays, never against production Exchange. Isolation contains tooling misfires, malformed messages, and module side effects away from live court mail that supports real cases and filings. Fake relays still allow exercise realism for delivery paths without hitchhiking on production connectors. Installing SET on a clerk’s production workstation and sending through live Exchange for realism places offensive SE tooling on an endpoint that handles real work and risks production impact. Pointing SET at production Exchange connectors whenever the change window is shorter than one hour trades safety for schedule pressure and is not an acceptable exception model. Allowing production mail use if testers delete campaign messages within five minutes of send cannot un-send risk, side effects, or journal/archive copies already created. Exam caveat: GOAA SET deployment questions emphasize civic isolation from production collaboration systems. Operational check: provision SET on isolated lab VLANs, use fake relays or dedicated simulation mail infrastructure, and explicitly deny production Exchange as a send path in the court ROE.