nerdexam
CompTIA

CS0-003 · Question #585

A systems administrator receives several reports about emails containing phishing links. The hosting domain is always different, but the URL follows a specific pattern of characters. Which of the…

The correct answer is A. Search email logs for a regular expression. Using a regular expression allows the administrator to search email logs for patterns in URLs, even when the domain changes. This is the most effective method for identifying unreported phishing emails that follow a consistent format.

Submitted by chen.hong· Mar 6, 2026Security Operations

Question

A systems administrator receives several reports about emails containing phishing links. The hosting domain is always different, but the URL follows a specific pattern of characters. Which of the following is the best way for the administrator to find more messages that were not reported?

Options

  • ASearch email logs for a regular expression.
  • BOpen a support ticket with the email hosting provider.
  • CSend a memo to all staff asking them to report suspicious emails.
  • DQuery firewall logs for any traffic with a suspicious website.

How the community answered

(35 responses)
  • A
    86% (30)
  • B
    3% (1)
  • C
    3% (1)
  • D
    9% (3)

Explanation

Using a regular expression allows the administrator to search email logs for patterns in URLs, even when the domain changes. This is the most effective method for identifying unreported phishing emails that follow a consistent format.

Topics

#phishing detection#email logs#regular expressions#threat hunting

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice