CompTIA CASP+ (CAS-004) — Question 636

A security administrator wants to detect a potential forged sender claim in the envelope of an email. Which of the following should the security administrator implement? (Choose two.)

Answer options

• A. MX record
• B. DMARC
• C. SPF
• D. DNSSEC
• E. S/MIME
• F. TLS

Correct answer: B, C

Explanation

DMARC (B) and SPF (C) are both protocols designed to help validate the authenticity of email senders, making them effective for detecting forged sender claims. MX records (A) are used for mail routing, DNSSEC (D) secures DNS information, S/MIME (E) provides end-to-end encryption, and TLS (F) secures the email transmission but does not address sender verification.