Which statement accurately describes how DMARC enforces email authentication?

• A. DMARC uses SPF and DKIM alignment to publish a policy and reporting to the domain.
• B. DMARC directly encrypts email content to prevent leakage.
• C. DMARC scans attachments for malware and blocks them.
• D. DMARC replaces SPF as the primary mechanism.

Answer: (A)

DMARC enforces email authentication by tying SPF and DKIM checks to the domain shown in the From header and by publishing a policy and reporting endpoints in DNS. It requires that either SPF or DKIM passes with alignment to the From domain; if neither passes with alignment, the domain’s DMARC policy dictates the action (none, quarantine, or reject) and aggregate/forensic reports are sent to the domain owner. This mechanism relies on SPF and DKIM working together and does not encrypt content, scan for malware, or replace SPF as the primary mechanism.