PSAA Practice Questions - Practical SOC Analyst Associate (PSAA) Exam

An email passes SPF checks but fails DMARC. Which scenario best explains this?

The email was sent from an authorized IP but the From: domain does not align with the SPF-authenticated domain. The email was sent from an unauthorized IP and the SPF record is missing. DMARC cannot fail if SPF passes; the configuration is incorrect. The email was signed with DKIM but the DKIM key was revoked.

Correct Answer:

The email was sent from an authorized IP but the From: domain does not align with the SPF-authenticated domain.

Access more questions from this quiz

Continue to PSAA Practice Questions - Practical SOC Analyst Associate (PSAA) Exam for more practice questions and the full quiz experience.

Access More Questions