Emails that the marketing department is sending to customers are going to the customers' spam folders. The security team is investigating the issue and discovers that the certificates used by the…

The correct answer is A. DMARC B. SPF C. DKIM. To prevent emails from being marked as spam, several DNS records related to email authentication need to be properly configured and updated when there are changes to the email server's certificates: DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC…

Submitted by yuriko_h· Mar 6, 2026Security Engineering

Question

Emails that the marketing department is sending to customers are going to the customers’ spam folders. The security team is investigating the issue and discovers that the certificates used by the email server were reissued, but DNS records had not been updated. Which of the following should the security team update in order to fix this issue? (Choose three.)

Options

ADMARC
BSPF
CDKIM
DDNSSEC
ESASC
FSAN
GSOA
HMX

How the community answered

(19 responses)

A
74% (14)
E
11% (2)
F
11% (2)
H
5% (1)

Explanation

To prevent emails from being marked as spam, several DNS records related to email authentication need to be properly configured and updated when there are changes to the email server's certificates: DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC records help email servers determine how to handle messages that fail SPF or DKIM checks, improving email deliverability and reducing the likelihood of emails being marked as spam. SPF (Sender Policy Framework): SPF records specify which mail servers are authorized to send email on behalf of your domain. Updating the SPF record ensures that the new email server is recognized as an authorized sender.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice