Cert Master

KT-EMS Business email compromise (BEC)

An attacker registers a domain one character off from your vendor. Which control reduces payment fraud?

Multiple choice — select one answer

Answer choices

  1. a. Single approver if under $50k, without security or identity team coordination per policy.
  2. b. Disable accounts payable entirely, without security or identity team coordination per policy.
  3. c. Vendor master data with approved domains and dual approval on banking changes
  4. d. Whitelist all .com domains, without security or identity team coordination per policy.

Architectural breakdown & explanation

Look-alike domains are classic BEC; vendor controls and dual approval are key.

Correct answer(s): c. Vendor master data with approved domains and dual approval on banking changes

Exam domain: Business email compromise (BEC) (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Email Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications