300-720 · Question #84
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured…
The correct answer is D. Modify Subject. Since the SPF hardfail messages will be released automatically after 24 hours, end users need a visible signal that a message carries elevated risk when it arrives in their inbox. Modifying the Subject (D) - for example, prepending a tag like '[WARNING: SPF FAIL]' - ensures…
Question
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business. Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?
Options
- ANotify Recipient
- BStrip Attachments
- CNotify Sender
- DModify Subject
How the community answered
(30 responses)- A17% (5)
- B3% (1)
- C7% (2)
- D73% (22)
Explanation
Since the SPF hardfail messages will be released automatically after 24 hours, end users need a visible signal that a message carries elevated risk when it arrives in their inbox. Modifying the Subject (D) - for example, prepending a tag like '[WARNING: SPF FAIL]' - ensures recipients see the risk indicator directly in their email client before opening the message. Notify Recipient (A) sends a separate notification email, which adds noise and does not persist with the original message. Strip Attachments (B) would alter the email content unnecessarily. Notify Sender (C) alerts the external sender, which is inappropriate for a message under SPF review and could expose policy details to a potential attacker.
Topics
Community Discussion
No community discussion yet for this question.