Sending Server IP & Reverse DNS is part of which artifact category?

• A. File Artifacts
• B. Web Artifacts
• C. None
• D. Email Artifacts

Answer: (D)

The main idea here is understanding where routing and origin information of a message lives. Email artifacts capture metadata that travels with a message, especially in the headers, which document the path the email took from sender to recipient. The sending server’s IP address and the reverse DNS lookup information are classic pieces of data found in those headers (the Received lines). They’re used to trace where the email came from and the chain of servers it passed through, which is exactly what you examine when collecting and analyzing email artifacts.

This fits email artifacts because those artifacts are about the message itself and its delivery metadata, not about files on disk or web activity. File artifacts concern data stored in files and their metadata, while web artifacts relate to browser or web server activity and logs. So, the sending server IP and reverse DNS belong to the realm of email artifacts, where you’d look at email headers to verify origin and routing.