EC-Council
312-49 · Question #451
You have been asked to investigate after a user has reported a threatening e-mail they have received from an external source. Which of the following are you most interested in when trying to trace the
Sign in or unlock 312-49 to reveal the answer and full explanation for question #451. The question stem and answer options stay visible for context.
Submitted by ahmad_uae· Apr 18, 2026Network Forensics
Question
You have been asked to investigate after a user has reported a threatening e-mail they have received from an external source. Which of the following are you most interested in when trying to trace the source of the message?
Options
- AThe X509 Address
- BThe SMTP reply Address
- CThe E-mail Header
- DThe Host Domain Name
Unlock 312-49 to see the answer
You've previewed enough free 312-49 questions. Unlock 312-49 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Email Forensics#Email Header Analysis#Source Tracing#Digital Investigation