nerdexam
CompTIA

CAS-003 · Question #229

A SaaS-based email service provider often receives reports from legitimate customers that their IP netblocks are on blacklists and they cannot send email. The SaaS has confirmed that affected…

The correct answer is D. Establish relationship with a blacklist operators so broad entries can be replaced with more. When legitimate customers share IP ranges with abusive users who have caused blacklisting, the most effective resolution is collaborating with blacklist operators to replace broad netblock entries with targeted listings of the specific abusive IPs. This removes the impact on…

Enterprise Security Architecture

Question

A SaaS-based email service provider often receives reports from legitimate customers that their IP netblocks are on blacklists and they cannot send email. The SaaS has confirmed that affected customers typically have IP addresses within broader network ranges and some abusive customers within the same IP ranges may have performed spam campaigns. Which of the following actions should the SaaS provider perform to minimize legitimate customer impact?

Options

  • AInform the customer that the service provider does not have any control over third-party blacklist
  • BPerform a takedown of any customer accounts that have entries on email blacklists because this
  • CWork with the legal department and threaten legal action against the blacklist operator if the
  • DEstablish relationship with a blacklist operators so broad entries can be replaced with more

How the community answered

(31 responses)
  • A
    10% (3)
  • B
    13% (4)
  • C
    3% (1)
  • D
    74% (23)

Why each option

When legitimate customers share IP ranges with abusive users who have caused blacklisting, the most effective resolution is collaborating with blacklist operators to replace broad netblock entries with targeted listings of the specific abusive IPs. This removes the impact on innocent customers while maintaining enforcement against actual spammers.

AInform the customer that the service provider does not have any control over third-party blacklist

Claiming the provider has no control over third-party blacklists is inaccurate - SaaS providers can actively engage blacklist operators and are expected to do so on behalf of their customers.

BPerform a takedown of any customer accounts that have entries on email blacklists because this

Removing customer accounts based solely on being caught in a broad blacklist entry punishes legitimate customers who have not been abusive and does not address the root cause.

CWork with the legal department and threaten legal action against the blacklist operator if the

Threatening legal action against blacklist operators is adversarial, legally weak given blacklists operate under safe harbor protections, and destroys cooperative relationships that would otherwise resolve the issue.

DEstablish relationship with a blacklist operators so broad entries can be replaced with moreCorrect

Establishing a direct relationship with blacklist operators allows the SaaS provider to submit evidence identifying specific abusive IPs within a broader blocked range, enabling operators to narrow the blacklist entry to only those IPs. This targeted approach restores email deliverability for legitimate customers sharing the same subnet while preserving the blacklist's protective function against confirmed spammers, protecting the provider's reputation and customer relationships.

Concept tested: Email blacklist remediation for shared IP address space

Source: https://www.m3aawg.org/published-documents/m3aawg-senders-best-common-practices

Topics

#email security#IP blacklisting#reputation management#SaaS security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-003 Practice