EC-CouncilDigital Forensics Essentials
Domain 6Objective 4
Email Header Analysis and Authentication DFE Practice Questions (Page 7)
Part of the Dark Web and Email Forensics domain, which makes up ~16% of our current practice bank.
40questions here
8free pages
8concepts
Questions 31–35
- 31
What does a valid DKIM signature verify about an email?
Select an answer first - 32
An email administrator is troubleshooting why a legitimate email sent by an employee's personal device is failing DKIM. The email is sent through the company's mail server, which signs all outgoing mail. The DKIM signature in the header is valid, but the Authentication-Results shows dkim=fail. What is the most likely cause?
Select an answer first - 33
Which email authentication protocol uses a digital signature to verify that a message was not altered in transit and that it originated from the claimed domain?
Select an answer first - 34
A company's SPF record is: v=spf1 ip4:203.0.113.0/24 -all An email is received from IP 203.0.113.99, but the Authentication-Results header shows spf=fail. What is the most likely reason?
Select an answer first - 35
What does the 'dmarc=fail' result in an Authentication-Results header indicate?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DFE” is a trademark of its owner, used for identification only.