nerdexam
EC-Council

312-38 · Question #89

Fill in the blank with the appropriate term. ______________is a method for monitoring the e-mail delivery to the intended recipient. Answer: Email tracking

The correct answer is C. (http contains "hotmail") && (http contains "Reply-To"). Option C is correct because email tracking in web-based mail (like Hotmail) works via HTTP requests that expose email headers such as Reply-To - a field commonly used by tracking systems to embed return paths or beacon URLs that confirm delivery and opens. Capturing HTTP…

Network Security Monitoring and Analysis

Question

Fill in the blank with the appropriate term. ______________is a method for monitoring the e-mail delivery to the intended recipient. Answer: Email tracking

Options

  • A(http = "login.pass.com") && (http contains "SMTP")
  • B(http contains "email") && (http contains "hotmail")
  • C(http contains "hotmail") && (http contains "Reply-To")
  • D(http = "login.passport.com") && (http contains "POP3")

How the community answered

(23 responses)
  • A
    4% (1)
  • C
    91% (21)
  • D
    4% (1)

Explanation

Option C is correct because email tracking in web-based mail (like Hotmail) works via HTTP requests that expose email headers such as Reply-To - a field commonly used by tracking systems to embed return paths or beacon URLs that confirm delivery and opens. Capturing HTTP traffic containing both "hotmail" and "Reply-To" specifically fingerprints this tracking behavior at the packet level.

Why the distractors are wrong:

  • A is wrong because SMTP is the sending protocol (port 25), not a delivery confirmation mechanism - and it doesn't operate over HTTP.
  • B is wrong because filtering only on "email" + "hotmail" is too broad; it would catch general webmail activity, not tracking-specific traffic.
  • D is wrong because POP3 is a retrieval protocol (downloading mail from a server), which has nothing to do with tracking delivery confirmation, and also doesn't run over HTTP.

Memory tip: Think "Reply-To = Reply back to tracker." The Reply-To header is the tracking system's return address - it's how the sender knows the email reached (and was opened by) the recipient. If you see it in HTTP traffic alongside a webmail provider, that's a tracking handshake in action.

Topics

#email tracking#email monitoring#delivery tracking#email security

Community Discussion

No community discussion yet for this question.

Full 312-38 Practice