220-802 · Question #986
A customer wrote an email password on a piece of paper and has misplaced it. The customer wants to know if the account has been compromised. Which of the following symptoms will MOST likely indicate…
The correct answer is D. Undeliverable email returns. If an email account is compromised and used to send spam, the attacker's outbound messages to invalid addresses will generate Non-Delivery Reports (NDRs) that bounce back to the account owner, revealing unauthorized use.
Question
A customer wrote an email password on a piece of paper and has misplaced it. The customer wants to know if the account has been compromised. Which of the following symptoms will MOST likely indicate that this has occurred?
Options
- APop-ups while browsing
- BLack of Internet connectivity
- CChanged home page
- DUndeliverable email returns
How the community answered
(57 responses)- A5% (3)
- B2% (1)
- D93% (53)
Why each option
If an email account is compromised and used to send spam, the attacker's outbound messages to invalid addresses will generate Non-Delivery Reports (NDRs) that bounce back to the account owner, revealing unauthorized use.
Pop-ups while browsing indicate adware or browser-based malware infection, which is unrelated to a stolen email credential.
Loss of Internet connectivity is a network or ISP issue and has no direct connection to email account compromise.
A changed browser home page typically indicates unwanted browser extension or adware, not unauthorized email account access.
When a malicious actor gains access to an email account and sends bulk messages, many will be addressed to non-existent addresses, causing mail servers to return undeliverable or bounce-back messages to the account's inbox. This is a specific and reliable symptom of account hijacking rather than a general malware infection. The volume of unexpected bounce messages is a well-known indicator of credential compromise.
Concept tested: Identifying email account compromise via NDR bounce messages
Source: https://support.microsoft.com/en-us/office/identify-and-restore-a-hacked-account-0a2d5600-5b57-4b1c-9e69-77b0c5e8d7a3
Topics
Community Discussion
No community discussion yet for this question.