Exam 220-1101 topic 1 question 406 discussion

The correct answer is: C. SPF Here's why: SPF (Sender Policy Framework) allows domain owners to specify a list of authorized IP addresses that can send email for their domain. When an email is received, the receiving mail server checks the SPF record of the sender's domain to see if the IP address used is authorized. If it's not, the receiving mail server can reject the email or mark it as spam.

C is the correct answer SPF stands for Sender Policy Framework, which is a protocol that allows domain owners to specify which IP addresses are authorized to send email on behalf of their domains1. SPF helps prevent email spoofing and phishing by verifying the sender’s identity and preventing unauthorized use of their domain name12. When an email is received, the receiving server checks the SPF record of the sender’s domain, which is a DNS TXT record that lists the valid IP addresses for that domain12. The server then compares the sender’s IP address with the SPF record and determines if it matches or not. If it matches, the email passes the SPF check and is accepted; if it does not match, the email fails the SPF check and is rejected or marked as spam12.

The correct answer is: C. SPF (Sender Policy Framework). Explanation: SPF (Sender Policy Framework): SPF is an email authentication protocol that allows domain owners to specify which IP addresses are authorized to send emails on behalf of their domain. When an email is received, the receiving server checks the SPF record to verify if the sender’s IP address is authorized to send emails for that domain. Why the other options are less suitable: A. DKIM (DomainKeys Identified Mail): DKIM adds a digital signature to emails, which helps verify that the email has not been altered in transit and confirms the sender’s identity, but it does not directly check the sender’s IP address.

From Wikipedia: "DKIM allows the receiver to check that an email that claimed to have come from a specific domain was indeed authorized by the owner of that domain."

What is exactly a correct answer?

The correct answer is A. DKIM (DomainKeys Identified Mail). DKIM is a service that checks whether the sender's IP address is associated with the sender's domain name when receiving email ¹. DKIM is a way to prevent email fraud by authenticating the domain name from which a mail was sent and making sure it was not sent from a different domain ².