Which header is not used to determine the source of an email?

The correct answer is C. "Delivered:" header. Option C ("Delivered:") is correct because no such standard email header exists - it's a fabricated option, so it cannot be used to determine anything about an email's origin. The "Received:" header (A) is added by each mail server that handles the message, creating a chain…

Question

Options

A"Received:" header
B"Message-ID:" header
C"Delivered:" header
D"SMTP From:" header

How the community answered

(28 responses)

A
14% (4)
B
4% (1)
C
79% (22)
D
4% (1)

Explanation

Option C ("Delivered:") is correct because no such standard email header exists - it's a fabricated option, so it cannot be used to determine anything about an email's origin. The "Received:" header (A) is added by each mail server that handles the message, creating a chain that traces the email's path and source. The "Message-ID:" header (B) contains a unique identifier generated by the originating mail server, which can reveal the sending domain and help trace the email's source. The "SMTP From:" (also called the envelope sender or Return-Path) (D) is the address used during the SMTP transaction and directly identifies where the message claims to originate.

Memory tip: If a header sounds made-up or doesn't appear in RFC 5321/5322, it's probably the trap answer - real email forensics relies on Received:, From:, Message-ID:, Return-Path:, and Reply-To:, never "Delivered:".

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice