A security administrator receives multiple reports about the same suspicious email. Which of the following is the most likely reason for the malicious email's continued delivery?

The correct answer is B. Information from reported emails is not being used to tune email filtering tools. If reported email data is not used to update and tune filtering tools, the malicious email can continue bypassing defenses and reaching other users’ inboxes.

Submitted by satoshi_tk· Mar 6, 2026Security Operations

Question

A security administrator receives multiple reports about the same suspicious email. Which of the following is the most likely reason for the malicious email's continued delivery?

Options

AEmployees are flagging legitimate emails as spam.
BInformation from reported emails is not being used to tune email filtering tools.
CEmployees are using shadow IT solutions for email.
DEmployees are forwarding personal emails to company email addresses.

How the community answered

(35 responses)

A
9% (3)
B
43% (15)
C
14% (5)
D
34% (12)

Explanation

If reported email data is not used to update and tune filtering tools, the malicious email can continue bypassing defenses and reaching other users’ inboxes.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice