Email Crime Investigation DFE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In an email header, which field typically contains the email address of the sender as displayed to the recipient?

   • AReturn-Path
   • BReceived
   • CMessage-ID
   • DFrom
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is examining an email that claims to be from a bank. The email's 'From' header shows the bank's domain, but the 'Received' headers show the message came from a server in a country where the bank has no operations. Additionally, the SPF check fails. What is the most likely conclusion?

   • AThe email is spoofed, as the SPF failure and mismatched routing indicate the sender is not authorized by the bank's domain.
   • BThe email is a phishing attempt, but the SPF failure is irrelevant.
   • CThe email is legitimate but was routed through a third-party email security service.
   • DThe email is legitimate because the 'From' header matches the bank's domain.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary objective of an email crime investigation?

   • ATo block the suspect's email account permanently to prevent further crimes
   • BTo recover all emails from a suspect's account regardless of relevance to the case
   • CTo identify, preserve, and analyze email evidence to support legal or disciplinary proceedings
   • DTo determine the email service provider's security weaknesses for public disclosure
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of an email-related crime?

   • APhishing attacks that trick recipients into revealing credentials
   • BForwarding a joke email to a friend
   • CUsing email to schedule a team meeting
   • DSending a legitimate newsletter to subscribed users
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An analyst is tracing an email that was sent from a webmail service like Gmail. The email headers show the originating IP address of the sender. What additional information can be obtained from this IP address to help identify the sender?

   • AThe sender's social security number.
   • BThe sender's email password.
   • CThe exact physical address of the sender.
   • DThe approximate geographic location of the sender, which can be correlated with other logs.
   Reveal Solution Discussion Select an answer first