What is the primary purpose of email spoofing in practice statements?

• A. To encrypt email contents to prevent interception.
• B. To log sender information for auditing.
• C. To trick recipients into trusting the origin of the message.
• D. To reduce spam by authenticating senders.

Answer: (C)

Email spoofing is about deception through impersonation. The goal is to make a message appear to come from someone the recipient already trusts or recognizes, so the recipient believes the content without skepticism. By forging the sender’s address, display name, or other identifiers, attackers exploit trust to coax actions such as revealing passwords, clicking dangerous links, or opening infected attachments. This kind of social engineering relies on the psychology of trust and authority, not on securing the content itself.

Encryption secures the contents of a message, which is the opposite of spoofing’s intent. Logging sender information is about auditing and tracing who sent a message, not about convincing a recipient the message originated from someone legitimate. Methods aimed at reducing spam typically involve authenticating senders to prevent spoofing; spoofing defeats those protections, not serves as their purpose.