During an Investigation, an Analyst Discovers the Following Rule in an Executive's

question 61

Multiple Choice

During an investigation, an analyst discovers the following rule in an executive's email client: IF * TO <[e-mail]> THEN mailto: <[e-mail]> SELECT FROM 'sent' THEN DELETE FROM <[e-mail]> The executive is not aware of this rule. Which of the following should the analyst do FIRST to evaluate the potential impact of this security incident?

• A) Check the server logs to evaluate which emails were sent to <[e-mail]> Check the server logs to evaluate which emails were sent to <[e-mail]>
• B) Use the SIEM to correlate logging events from the email server and the domain server
• C) Remove the rule from the email client and change the password
• D) Recommend that management implement SPF and DKIM

---

Definitions:

Hasty Generalizations

A logical fallacy where a conclusion is made based on insufficient or biased evidence, leading to an overgeneralized belief.

Persuasive Messages

Communications intended to change the way someone thinks, feels, or acts by using reasoning, logic, or emotion.

Direct Approach

A communication style that is straightforward and to the point, often used in business or technical communications to convey information clearly.

Logical Appeal

Persuasive approach that calls on reasoning and evidence rather than audience feelings and sympathies.