A trick used by forgers is to:

Question

Options

• ADelete Received: headers before sending
• BAdd spurious Received: headers after sending
• CAdd spurious Received: headers before sending
• DForge the UDP packets

• A
  7% (2)
• B
  3% (1)
• C
  77% (23)
• D
  13% (4)

Explanation

Forgers add fake Received: headers before sending the message (C) because email servers prepend a new Received: header each time a message is relayed - so headers added prior to transmission get buried underneath legitimate ones, making the forged path appear to be part of the authentic delivery chain and harder to detect.

Why the distractors are wrong:

• A - Deleting Received: headers is suspicious and technically difficult; mail servers add them automatically, and missing headers raise red flags.
• B - Adding headers after sending is impossible for the sender; once a message is in transit, the sender has no control over it.
• D - Received: headers are an SMTP (TCP) concept, not UDP; forging UDP packets is a different attack class entirely and irrelevant to email header manipulation.

Memory tip: Think "pre-load the lie" - forgers stuff fake headers in before sending so legitimate servers layer real headers on top, burying the forgery like sediment under fresh rock.

No community discussion yet for this question.