nerdexam
CompTIA

CS0-003 · Question #89

A company's domain has been spooled in numerous phishing campaigns. An analyst needs to determine the company is a victim of domain spoofing, despite having a DMARC record that should tell mailbox…

The correct answer is B. The DMARC record's policy tag is incorrectly configured. p=none - Take no action on the message and deliver it to the intended recipient. It should be p=reject or p=qarantine

Submitted by lucia.co· Mar 6, 2026Security operations

Question

A company's domain has been spooled in numerous phishing campaigns. An analyst needs to determine the company is a victim of domain spoofing, despite having a DMARC record that should tell mailbox providers to ignore any email that fails DMARC upon review of the record, the analyst finds the following:

v=DMARC1; p=none; fo=0; rua=mailto:[email protected]; ruf=mailto:[email protected]; adkim=r; rf=afrf; ri=86400; Which of the following BEST explains the reason why the company's requirements are not being processed correctly by mailbox providers?

Options

  • AThe DMARC record's DKIM alignment tag Is incorrectly configured.
  • BThe DMARC record's policy tag is incorrectly configured.
  • CThe DMARC record does not have an SPF alignment lag.
  • DThe DMARC record's version tag is set to DMARC1 instead of the current version, which is

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    85% (35)
  • C
    2% (1)
  • D
    7% (3)

Explanation

p=none - Take no action on the message and deliver it to the intended recipient. It should be p=reject or p=qarantine

Topics

#DMARC#Email security#Domain spoofing#Phishing prevention#DNS records

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice