As part of the image process, which of the following is the FIRST step the analyst should take?

A large number of emails have been reported, and a security analyst is reviewing the following information from the emails:

As part of the image process, which of the following is the FIRST step the analyst should take?
A . Block the email address carl b@comptia1 com, as it is sending spam to subject matter experts
B . Validate the final "Received" header against the DNS entry of the domain.
C . Compare the ‘Return-Path" and "Received" fields.
D . Ignore the emails, as SPF validation is successful, and it is a false positive

View Answer

Answer: C