Câu 140: CAS-005: CompTIA SecurityX

A security engineer discovers that some legacy systems are still in use or were not properly decommissioned. After further investigation, the engineer identifies that an unknown and potentially malicious server is also sending emails on behalf of the company. The security engineer extracts the following data for review: Which of the following actions should the security engineer take next? (Choose two.)

1. A. Rotate the DKIM selector to use another key.
2. B. Change the DMARC policy to reject and remove references to the server. — đáp án hiện tại
3. C. Remove the unnecessary servers from the SPF record.
4. D. Change the SPF record to enforce the hard fail parameter. — đáp án hiện tại
5. E. Update the MX record to contain only the primary email server.
6. F. Change the DMARC policy to none and monitor email flow to establish a new baseline.