During an Investigation, an Analyst Discovers the Following Rule in an Executive's

question 61

Multiple Choice

During an investigation, an analyst discovers the following rule in an executive's email client: IF * TO <[e-mail]> THEN mailto: <[e-mail]> SELECT FROM 'sent' THEN DELETE FROM <[e-mail]> The executive is not aware of this rule. Which of the following should the analyst do FIRST to evaluate the potential impact of this security incident?

• A) Check the server logs to evaluate which emails were sent to <[e-mail]> Check the server logs to evaluate which emails were sent to <[e-mail]>
• B) Use the SIEM to correlate logging events from the email server and the domain server
• C) Remove the rule from the email client and change the password
• D) Recommend that management implement SPF and DKIM

---

Definitions:

Racial Categories

Racial categories are classifications of humans into groups based on physical traits, ancestry, genetics, or social relations.

Prejudgment

The formation of an opinion or conclusion about something or someone before having adequate knowledge or experience.

Misjudgment

An incorrect or unfair assessment or opinion.

Assimilation Theory

Process by which a minority becomes socially, economically, and culturally absorbed within the dominant society.