ASSOCIATE-GOOGLE-WORKSPACE-ADMINISTRATOR · Question #45
You are configuring Gmail for your company and want to implement a layered security approach. You decide to implement industry-standard email authentication protocols. What should you do? Choose 2…
The correct answer is C. Configure DKIM to digitally sign outbound emails and verify their origin. E. Set up SPF records to specify authorized mail servers for your domain. SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are the two foundational industry-standard email authentication protocols. SPF publishes a DNS TXT record listing all servers authorized to send mail for your domain, allowing receiving servers to reject…
Question
You are configuring Gmail for your company and want to implement a layered security approach. You decide to implement industry-standard email authentication protocols. What should you do? Choose 2 answers
Options
- AEnable a default email quarantine for all users to isolate suspicious emails and determine if the
- BConfigure a blocked senders rule to block all emails from unknown senders.
- CConfigure DKIM to digitally sign outbound emails and verify their origin.
- DDisable IMAP for your organization to prevent external clients from accessing Gmail.
- ESet up SPF records to specify authorized mail servers for your domain.
How the community answered
(37 responses)- A8% (3)
- B3% (1)
- C86% (32)
- D3% (1)
Explanation
SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are the two foundational industry-standard email authentication protocols. SPF publishes a DNS TXT record listing all servers authorized to send mail for your domain, allowing receiving servers to reject spoofed messages. DKIM cryptographically signs outbound messages so recipients can verify the signature was created by your domain's private key, confirming message integrity and origin. Together they form the basis of a layered authentication strategy (often completed with DMARC). Option A (quarantine) is a filtering action, not an authentication protocol. Option B (blocking all unknown senders) is too aggressive and not an authentication standard. Option D (disabling IMAP) limits email client access but does not authenticate email.
Topics
Community Discussion
No community discussion yet for this question.