✳ Foundations elective / 1 lesson
Mailbox literacy: what SPF, DKIM, and DMARC prove
Focused single-lesson path unpacking how SPF validates the sending IP, DKIM verifies cryptographic header/body signatures, and DMARC enforces visible From-header alignment - plus why none of the three proves a message is benign.
This Foundations elective sits after identity. Monitor-then-enforce is a separate path.
01Email authentication: what SPF, DKIM, and DMARC prove (and what they do not)
SPF, DKIM, and DMARC verify three specific domain claims on an incoming email message. Learn how each check works in DNS and why a DMARC pass never guarantees that an email is safe or written by a trusted human.
Test your engineering judgment
Every lesson closes with a 4-choice scenario check modeled on real architectural trade-offs. Ready for full hands-on simulations or certification drills?
Open the practice labs ↗ · Launch the CISSP practice simulator ↗