CAS-005 · Question #82
A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and…
The correct answer is B. The TXT record must be Changed to "v=dmarc ip4:192.168.1.10 include:my-email.com -all" D. The email CNAME record must be changed to a type A record pointing to 192.168.1.10. The security engineer should modify the following to fix the email migration issues: Email CNAME Record: The email CNAME record must be changed to a type A record pointing to 192.168.1.10. This is because CNAME records should not be used where an IP address (A record) is…
Question
A company hired an email service provider called my-email.com to deliver company emails. The company started having several issues during the migration. A security engineer is troubleshooting and observes the following configuration snippet:
Which of the following should the security engineer modify to fix the issue? (Choose two.)
Exhibits
Options
- AThe email CNAME record must be changed to a type A record pointing to 192.168.1.11
- BThe TXT record must be Changed to "v=dmarc ip4:192.168.1.10 include:my-email.com -all"
- CThe srvo1 A record must be changed to a type CNAME record pointing to the email server
- DThe email CNAME record must be changed to a type A record pointing to 192.168.1.10
- EThe TXT record must be changed to "v=dkim ip4:l92.168.1.11 include my-email.com -ell"
- FThe TXT record must be Changed to "v=dkim ip4:192.168.1.10 include:email-all"
- GThe srv01 A record must be changed to a type CNAME record pointing to the web01 server
How the community answered
(14 responses)- B79% (11)
- F7% (1)
- G14% (2)
Explanation
The security engineer should modify the following to fix the email migration issues: Email CNAME Record: The email CNAME record must be changed to a type A record pointing to 192.168.1.10. This is because CNAME records should not be used where an IP address (A record) is required. Changing it to an A record ensures direct pointing to the correct IP. TXT Record for DMARC: The TXT record must be changed to "v=dmarc ip4:192.168.1.10 include .com -all". This ensures proper configuration of DMARC (Domain-based Message Authentication, Reporting & Conformance) to include the correct IP address and the email service provider domain. DMARC: Ensuring the DMARC record is correctly set up helps in preventing email spoofing and phishing, aligning with email security best practices.
Community Discussion
No community discussion yet for this question.

