CompTIA SecurityX (CAS-005) CAS-005 — Question 286

Topic 1 · Question 286 · Select all that apply

A security engineer discovers that some legacy systems are still in use or were not properly decommissioned. After further investigation, the engineer identifies that an unknown and potentially malicious server is also sending emails on behalf of the company. The security engineer extracts the following data for review: Which of the following actions should the security engineer take next? (Choose two.)

• ARotate the DKIM selector to use another key.
• BChange the DMARC policy to reject and remove references to the server.
• CRemove the unnecessary servers from the SPF record.
• DChange the SPF record to enforce the hard fail parameter.
• EUpdate the MX record to contain only the primary email server.
• FChange the DMARC policy to none and monitor email flow to establish a new baseline.

Select 2 answers to reveal the result.