Deck 10: Electronic Commerce Security

Question 1

Signed code or messages serve the same function as a photo on a driver's license or passport.

Answer 1

True

Question 2

Message packets on the Internet travel a planned path from a source node to a destination node.

Answer 2

False

Question 3

A digital certificate contains a means to send an encrypted message to the entity that sent the original Web page or e-mail message.

Answer 3

True

Question 4

Active content can be delivered as an e-mail attachment.

Question 5

One significant threat to electronic commerce is theft of sensitive or personal information.

Question 6

Active content can pose a threat to the security of client devices.

Question 7

In the context of the elements of computer security, necessity refers to preventing data delays or denials.

Question 8

Applets typically run within the Web browser and are most often written in the Java programming language.

Question 9

A Trojan horse erasing or altering information in a client computer is said to be a secrecy violation.

Question 10

Active content elements are programs that run on the server.

Question 11

The most complete way for Web site visitors to protect themselves from revealing private information or being tracked by cookies is to disable cookies entirely.

Question 12

Any message traveling on the Internet is subject to secrecy, integrity, and necessity threats.

Question 13

Worms can spread quickly through the Internet.

Question 14

Java applets operating in a sandbox can perform file input, output, or delete operations.

Question 15

The path taken by a message packet from a source node to a destination node can be controlled by Internet users.

Question 16

People who write programs or manipulate technologies to obtain unauthorized access to computers and networks are called crackers.

Question 17

Active content is launched in a Web browser automatically prior to the browser loading the Web page containing active content.

Question 18

Networks outside a firewall are referred to as trusted networks.

Question 19

Persistent cookies refer to the category of cookies which exist until the Web client ends the connection.

Question 20

Threats that are unlikely to occur can be ignored when the cost to protect against the threat exceeds the value of the protected asset.

Question 21

A(n) _____ is an object that contains programs and properties that Web designers place on Web pages to perform particular tasks.

A) persistent cookie
B) dead link
C) ActiveX control
D) session cookie

Question 22

In the context of computer security, the protection of assets using nonphysical means is called _____.

A) eavesdropping
B) logical security
C) tangible security
D) phishing

Question 23

JavaScript and VBScript are _____, which provide commands that are executed on the client.

A) plug-ins
B) scripting languages
C) Web bugs
D) session cookies

Question 24

_____ are computer sleuths who are hired to probe PCs and locate information that can be used in legal proceedings.

A) Wardrivers
B) Computer forensics experts
C) Crackers
D) Hackers

Question 25

_____ is the protection of computer assets from unauthorized access, use, alteration, or destruction.

A) Computer security
B) Computer risk
C) Spamming
D) Phishing

Question 26

ActiveX controls run only on computers with _____ operating systems.

A) Windows
B) Linux
C) UNIX
D) Mac

Question 27

_____ refers to protecting against unauthorized data disclosure and ensuring the authenticity of the data source.

A) Necessity
B) Secrecy
C) Integrity
D) Encryption

Question 28

One disadvantage of private-key systems is that encryption and decryption are significantly slower than public-key systems.

Question 29

In the context of categorizing cookies in terms of their time duration, _____ are cookies which exist until the Web client ends the connection.

A) first-party cookies
B) persistent cookies
C) third-party cookies
D) session cookies

Question 30

A(n) _____ is a person or device that is able to listen in on and copy Internet transmissions.

A) eavesdropper
B) white hat hacker
C) black hat hacker
D) cracker

Question 31

_____ refers to preventing unauthorized data modification.

A) Integrity
B) Secrecy
C) Necessity
D) Completeness

Question 32

In the context of encryption, shorter keys usually provide significantly better protection than longer keys.

Question 33

A _____ is a program hidden inside another program or Web page that masks its true purpose.

A) remote wipe
B) Trojan horse
C) digital certificate
D) wardriver

Question 34

A(n) _____ is a small application program that typically runs within a Web browser.

A) applet
B) buffer
C) white hat hacker
D) black hat hacker

Question 35

A _____ is a written statement describing which assets to protect and why they are being protected, who is responsible for that protection, and which behaviors are acceptable and which are not.

A) plain text
B) cypher text
C) security policy
D) digital signature

Question 36

The purpose of a _____ is to provide a way for a third-party Web site to place cookies from that third-party site on a visitor's computer.

A) personal firewall
B) digital certificate
C) Web bug
D) gateway server

Question 37

Any act or object that poses a danger to computer assets is known as a _____.

A) countermeasure
B) bug
C) threat
D) code

Question 38

Backdoor is a program that protects information from unauthorized access.

Question 39

The Computer Emergency Response Team (CERT) is the most prominent organization that promotes computer security.

Question 40

A Web browser that has entered into a Secure Socket Layer session indicates that it is in an encrypted session.

Question 41

When a Trojan horse has taken over a large number of computers, the person who planted the virus can take control of all the computers and form a(n) _____.

Question 42

_____ is the electronic defacing of an existing Web site's page.

A) Spamming
B) Masquerading
C) Phishing
D) Cybervandalism

Question 43

Cookies placed on a client computer by a Web server site are called _____.

Question 44

First-party cookies and third-party cookies represent classification of cookies by their _____.

Question 45

_____ is pretending to be someone you are not or representing a Web site as an original when it is really a fake.

A) Hash coding
B) Spoofing
C) Warchalking
D) Cybervandalism

Question 46

Software applications called _____ provide the means to record information that passes through a computer or router that is handling Internet traffic.

A) remote wipes
B) digital certificates
C) sniffer programs
D) plug-ins

Question 47

In the context of elements of a security policy, _____ refers to the secure identification of clients and servers with digital signatures and certificates.

Question 48

A _____ is an element of a program that allows users to run the program without going through the normal authentication procedure for access to the program.

A) rogue app
B) backdoor
C) worm
D) remote wipe

Question 49

The purpose of a(n) _____ is to disrupt normal computer processing, or deny processing entirely.

Question 50

A(n) _____ cookie originates from a Web site other than the site being visited.

Question 51

A(n) _____ is a software that attaches itself to another program and can cause damage when the host program is activated.

A) applet
B) browser plug-in
C) virus
D) message digest

Question 52

A _____ is an area of memory set aside to hold data read from a file or database.

A) firewall
B) cookie
C) buffer
D) worm

Question 53

_____ is the protection of individual rights to nondisclosure.

A) Secrecy
B) Privacy
C) Necessity
D) Sensitivity

Question 54

Cookies are categorized as session or persistent based on _____.

Question 55

Most browsers allow users to limit the actions taken by Java applets and scripting languages by running them in a(n) _____, which is a functional subset of the full browser.

Question 56

A(n) _____ occurs when an Internet e-mail message is intercepted and its contents are changed before it is forwarded to its original destination.

Question 57

A(n) _____ is a procedure that recognizes, reduces, or eliminates a threat.

Question 58

A _____ is a number that summarizes an encrypted information.

A) digital certificate
B) hash function
C) message digest
D) hash algorithm

Question 59

The term _____ describes the process of hiding information within another piece of information.

A) wiretapping
B) steganography
C) authentication
D) decryption

Question 60

_____ encodes a message with an algorithm that uses a single numeric key to encode and decode data.

A) Hash coding
B) Symmetric encryption
C) Public-key encryption
D) Decrypting

Question 61

A(n) _____ is usually a long binary number that is used with the encryption algorithm to "lock" the characters of the message being protected so that they are undecipherable without the number.

Question 62

A(n) _____ security device is one that uses an element of a person's biological makeup to perform identification.

Question 63

_____ is the coding of information by using a mathematically based program and a secret key to produce a string of characters that is unintelligible.

Question 64

The program that transforms normal text into cipher text is called a(n) _____.

Question 65

Briefly describe the requirements for secure electronic commerce.

Question 66

A(n) _____ is a Trojan horse that secretly takes over another computer for the purpose of launching attacks on other computers.

Question 67

In some cities that have large concentrations of wireless networks, attackers, called _____, drive around in cars using their wireless-equipped laptop computers to search for accessible networks.

Question 68

A(n) _____ is a type of virus that replicates itself on the computers that it infects.

Question 69

An integrity threat, also known as _____, exists when an unauthorized party can alter a message stream of information.

Question 70

What are the six main elements included on a digital certificate?

Question 71

How is a buffer vulnerable to security threats?

Question 72

Apps that contain malware or that collect information from a mobile device and forward it to perpetrators are called _____.

Question 73

The science that studies encryption is called _____.

Question 74

_____ are the computers on the Internet that maintain directories that link domain names to IP addresses.

Question 75

Describe the security dangers inherent in ActiveX controls.

Question 76

_____ encryption encodes messages by using two mathematically related numeric keys.

Question 77

Browser _____ are programs that enhance the capabilities of browsers, handle Web content that a browser cannot handle.

Question 78

What is the difference between a virus and a worm?

Question 79

A(n) _____ is an attachment to an e-mail message or program embedded in a Web page that verifies that the sender or Web site is who it claims to be.

Question 80

The process of proposing and accepting various transmission conditions is called _____.