When configuring inbound email, what is a potential risk if the inbound address is not restricted?

When configuring inbound email, what is a potential risk if the inbound address is not restricted?

• A. Anyone with the address can send files to the folder, potentially exposing sensitive content.
• B. It requires two-factor authentication
• C. It automatically deletes emails after 7 days
• D. It only accepts attachments from admins

Answer: (B)

When an inbound email address isn’t restricted, the main risk is that anyone who knows or can guess that address can submit content into the system. This opens a channel for unauthorized submissions, which can lead to exposure of sensitive information, data leakage, or malicious content being stored or processed in your workflow. The option that best matches this risk describes that anyone with the address can send files to the folder, potentially exposing sensitive content. Security measures like requiring authentication or limiting who can send to that address are ways to mitigate this risk. The other options describe controls or policies (such as authentication requirements, retention rules, or admin-only attachments) rather than the fundamental risk posed by an unrestricted inbound address.

When an inbound email address isn’t restricted, the main risk is that anyone who knows or can guess that address can submit content into the system. This opens a channel for unauthorized submissions, which can lead to exposure of sensitive information, data leakage, or malicious content being stored or processed in your workflow. The option that best matches this risk describes that anyone with the address can send files to the folder, potentially exposing sensitive content. Security measures like requiring authentication or limiting who can send to that address are ways to mitigate this risk. The other options describe controls or policies (such as authentication requirements, retention rules, or admin-only attachments) rather than the fundamental risk posed by an unrestricted inbound address.