During a bulk email fraud investigation at a marketing firm in New York City, forensic...

The correct answer is D because the scenario specifically describes automated generation of possible email addresses by combining letters and numbers to find valid recipients. Under the CAN-SPAM Act, address harvesting and dictionary attacks are expressly identified aggravating violations that can support criminal penalties. The Federal Trade Commission explains that the law prohibits certain abusive bulk-email practices, including harvesting addresses and generating them through dictionary attacks. That is a direct match to the conduct in the question. The other options may also violate law in some circumstances, but they do not describe the exact behavior observed by the investigators. CHFI v11 includes legal issues affecting forensic investigations and specifically references U.S. laws against email crime, including the CAN-SPAM Act. In exam reasoning, when the question gives a precise operational pattern such as automated generation of possible addresses to identify live accounts, the best answer is the statute’s matching prohibited technique. Because the fraud scripts are enumerating likely addresses rather than merely sending messages, the violation is harvesting email addresses or generating them through a dictionary attack.