nerdexam
CompTIA

CAS-005 · Question #82

A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and…

The correct answer is B. The TXT record must be Changed to "v=dmarc ip4:192.168.1.10 include:my-email.com -all" D. The email CNAME record must be changed to a type A record pointing to 192.168.1.10. The security engineer should modify the following to fix the email migration issues: Email CNAME Record: The email CNAME record must be changed to a type A record pointing to 192.168.1.10. This is because CNAME records should not be used where an IP address (A record) is…

Submitted by obi.ng· Mar 6, 2026Security Engineering

Question

A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and observes the following configuration snippet:

Which of the following should the security engineer modify to fix the issue? (Choose two.)

Exhibits

CAS-005 question #82 exhibit 1
CAS-005 question #82 exhibit 2

Options

  • AThe email CNAME record must be changed to a type A record pointing to 192.168.1.11
  • BThe TXT record must be Changed to "v=dmarc ip4:192.168.1.10 include:my-email.com -all"
  • CThe srvo1 A record must be changed to a type CNAME record pointing to the email server
  • DThe email CNAME record must be changed to a type A record pointing to 192.168.1.10
  • EThe TXT record must be changed to "v=dkim ip4:l92.168.1.11 include my-email.com -ell"
  • FThe TXT record must be Changed to "v=dkim ip4:192.168.1.10 include:email-all"
  • GThe srv01 A record must be changed to a type CNAME record pointing to the web01 server

How the community answered

(14 responses)
  • B
    79% (11)
  • F
    7% (1)
  • G
    14% (2)

Explanation

The security engineer should modify the following to fix the email migration issues: Email CNAME Record: The email CNAME record must be changed to a type A record pointing to 192.168.1.10. This is because CNAME records should not be used where an IP address (A record) is required. Changing it to an A record ensures direct pointing to the correct IP. TXT Record for DMARC: The TXT record must be changed to "v=dmarc ip4:192.168.1.10 include .com -all". This ensures proper configuration of DMARC (Domain-based Message Authentication, Reporting & Conformance) to include the correct IP address and the email service provider domain. DMARC: Ensuring the DMARC record is correctly set up helps in preventing email spoofing and phishing, aligning with email security best practices.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice