Residents receive forged messages that appear to come from [email protected] asking for gift-card payments. Which email-security controls best help receiving systems detect and reject that domain spoofing?
Select an answer to reveal the explanation.
Short Explanation
SPF, DKIM, and DMARC are the city's "this really is [email protected]" stamps—who may send, cryptographic signing, and a policy for failures. Without them, gift-card spoofs wearing the mayor's address sail right through.
Full Explanation
SPF authorizes sending hosts, DKIM cryptographically signs messages, and DMARC ties those checks to a domain policy (monitor, quarantine, or reject) with reporting. Implementing all three for a municipal domain such as city.gov helps receivers detect spoofed mayor@ addresses. Removing MX records, weakening transport security, or dumping mail into unmonitored queues does not authenticate the domain.