An attacker sends email to a domain toward an invalid address intentionally. A bounce back is sent and the attacker uses the header to determine internal mail relays. How is a header read to determine the path the bounce took?
A) From the bottom up
B) From the top down
C) With a sniffer
D) Headers are not useful, the source of the email is always spoofed

Question

Quizplus · Accepted Answer

While it is true that the source of a message can be spoofed, they aren't always. Headers are worth looking at just in case, if the bounce doesn't work, the attacker can also try to get someone in the company to send them an email.

An Attacker Sends Email to a Domain Toward an Invalid