During an incident involving phishing, a security analyst needs to find the source of the malicious email. Which of the following techniques would provide the analyst with this information?

The correct answer is A. Header analysis. Header analysis is the technique of examining the metadata of an email, such as the sender, recipient, date, subject, and routing information. It can help to identify the source of a malicious email by revealing the IP address and domain name of the originator, as well as any spo

Submitted by wei.xz· Mar 6, 2026Incident Response and Management

Question

Options

AHeader analysis
BPacket capture
CSSL inspection
DReverse engineering

How the community answered

(34 responses)

A
82% (28)
B
9% (3)
C
6% (2)
D
3% (1)

Explanation

Header analysis is the technique of examining the metadata of an email, such as the sender, recipient, date, subject, and routing information. It can help to identify the source of a malicious email by revealing the IP address and domain name of the originator, as well as any spoofing or redirection attempts.

Topics

#phishing incident#email source#header analysis#incident investigation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice