Deck 12: Privacy and Digital Security

Question 1

Information is generated when a person buys goods or services at a store .

Answer 1

True

Question 2

The vast majority of business transactions are anonymous .

Answer 2

False

Question 3

American privacy laws are much stricter than European privacy laws .

Answer 3

False

Question 4

The United States has not adopted the OECD principles .

Question 5

The United States provides limited enforcement of OECD principles .

Question 6

A company can place a cookie on your computer even if you've never visited its web site .

Question 7

A third-party cookie is initiated by a direct request from the user .

Question 8

Cookies can be used to track your online travels by using ad placement on various web sites .

Question 9

In contrast to the "omnibus"solution of adopting the OECD list, the United States uses an approach called "sectoral"which means that it passes laws to deal with specific industries (that is, business sectors) or practices .

Question 10

Messages that are encrypted using a public key RSA129 cryptosystem have, to date, not yet been cracked .

Question 11

The Do Not Call List was so successful that it has now been applied to email .

Question 12

Identity theft is the crime of posing as someone else for fraudulent purposes .

Question 13

Partial backups should be made more often than full backups .

Question 14

Emptying the Trash on your computer guarantees that the data has been erased .

Question 15

Laws in Hong Kong controlling the use of transaction information are stricter than those in the United States .

Question 16

The difference between a worm and a virus is that the worm program rides along with other software, while the virus can actually send itself to other devices on the Internet .

Question 17

Non European countries that want information on European citizens must show that they have privacy laws consistent with OECD principles .

Question 18

Opt-in means that a business can use the item selected unless the user explicitly prohibits the new use .

Question 19

Modern browsers allow the user to control the cookie policy for a computer .

Question 20

In the United States the protection of an individual's privacy is the responsibility of the U . S . government .

Question 21

The purpose of encryption is to allow private transmission and storage of sensitive information .

Question 22

Americans' legal access to a free credit check to learn their credit score and to check for errors applies the Fair Information Practices Guideline points of Purpose and Security .

Question 23

Personal computers can only be backed up to another hard disk .

Question 24

Cell phones can be used to track a user's location, even if the GPS is turned off .

Question 25

Two-factor authentication allows for greater security in user access to web sites .

Question 26

European privacy standards are closest to the policy called

A) Opt-In
B) Objection
C) No Limits
D) No Uses

Question 27

American privacy standards are closest to the policy called

A) No Limits
B) Objection
C) No Uses
D) Opt-In

Question 28

The accuracy of personal information is the responsibility of the

A) individual
B) data controller
C) data collector
D) government

Question 29

The person in charge of privacy policies and communication with individuals regarding their privacy is the

A) CEO
B) database developer
C) CIO
D) data controller

Question 30

Spyware

A) is illegal
B) cannot be installed without the user's permission
C) is software that snoops private information
D) All of these

Question 31

The RSA public key cryptosystem relies on

A) trapdoors
B) key escrow
C) prime numbers
D) All of these

Question 32

Cookies

A) are stored on a server for use by a client
B) are placed on a server by a client
C) are stored on a client and sent back to a server
D) cannot be removed from a client

Question 33

Backups on a personal computer

A) should be done daily
B) are just as essential to a personal system as a business system
C) should follow the same pattern of backups as that used by business systems
D) are not needed

Question 34

The most important consideration in a disaster recovery plan is to

A) always print your data
B) have a backup of your data
C) never trust the computer to store your files
D) All of these

Question 35

The OECD privacy principles were developed in

A) 1980
B) 1960
C) 2001
D) 1949

Question 36

Which OECD principle states that personal data should be protected by reasonable security measures against risks of disclosure, unauthorized access, misuse, modification, destruction, or loss?

A) Limited Collection Principle
B) Openness Principle
C) Use Limitation Principle
D) Security Principle

Question 37

A cookie contains information stored in

A) seven fields
B) a database
C) one byte
D) eight bytes

Question 38

A combination of encryption and decryption methods is a

A) cookie
B) cryptosystem
C) secure transaction
D) digital encryption system

Question 39

When the Send button is clicked to send an email

A) two copies of the message are produced
B) the message is backed up on a server
C) the message is immediately deleted from the sender's computer
D) the sender retains full control over the message

Question 40

United States companies that operate in the EU

A) must apply EU rules to all customer data no matter where the customer lives
B) must handle EU customer data under rules negotiated between the US and the EU
C) are not required to follow EU privacy law
D) cannot retain any customer data since there is no way to do so under both sets of laws

Question 41

The United States' approach of passing separate laws to govern privacy in specific industries or activities is called a(n) ________ approach .

A) individualized
B) divided
C) sectoral
D) random

Question 42

The most important advantage of public key encryption over private key is that

A) it can be easily performed by modern computer equipment
B) the encryption algorithm itself is kept carefully secret by the government
C) prime numbers are used in the encryption process
D) it doesn't matter if the "bad guys" find out the key used to encrypt messages

Question 43

A web page is transmitted securely when the protocol part of the URL is

A) http
B) secure
C) https
D) used with a lock icon next to the URL

Question 44

Which of the following may be used in a two-step authentication process?

A) two forms of biometric identification
B) two physical keys
C) two passwords
D) Any of these

Question 45

Select all that apply . Personal information can be tracked by

A) cookies
B) chip ID numbers
C) cell phone use
D) IP addresses

Question 46

Select all that apply . Which of the following can accurately complete the following sentence:If you disable cookies on your computer

A) you won't be able to see anything on the web site that has those cookies
B) you won't be able to enable cookies again on that computer
C) all cookies, including third-party cookies, will be blocked
D) you won't be able to perform most online transactions

Question 47

Select all that apply . Personal backups are not critical for

A) anything essential if you already have printed it
B) software programs
C) information that has been backed up but not changed
D) unimportant files

Question 48

Select all that apply . Which of the following activities creates an unnecessary risk of being hacked?

A) clicking on a bank's URL instead of typing it in
B) responding through email to requests for personal information
C) sending information to a web site that doesn't use encryption
D) using email to write a letter to a friend

Question 49

Select all that apply . Which of the following may result from malware?

A) Secure information may be obtained from your computer .
B) Contents on your hard drive may be erased .
C) Spam may be sent from your computer .
D) Backdoors may be created .

Question 50

Select all that apply . Which of the following are options that may be chosen in a two-factor authentication plan?

A) something the user is (like a fingerprint)
B) something the user calculates (like a math problem)
C) something the user possesses (like a key)
D) something the user knows (like a password)

Question 51

Most Americans wrongly assume that their privacy regarding business information is restricted to ________ .

Question 52

A(n) ________ is information that is stored on a client computer by an HTTP server computer .

Question 53

________ is the process of recovering encrypted cipher text .

Question 54

Malware that directly manipulates operating system tables to hide its presence is known as a ________ .

Question 55

A message exchange in which the content is encrypted to keep it private is known as ________ communication .

Question 56

The crime of posing as someone else for fraudulent purposes is ________ .

Question 57

The ________ principle of the OECD Fair Information Practices states that personal data gathered should be relevant to the purposes for which it is used and should be accurate, complete, and up-to-date .

Question 58

When a web site automatically sends details about your visit to that site to other providers, this is known as ________ .

Question 59

The type of key published by the receiver and used by the sender to encrypt messages is the ________ key .

Question 60

Computer scientists have not yet proved the invincibility of the RSA scheme, but it can be made more secure by ________ the size of the key .

Question 61

Software intended to do harm to a computer that is connected to the Internet is called ________ .

Question 62

The ________ public key cryptosystem, invented by Rivest, Shamir, and Adelman, is one of the popular PKC algorithms .

Question 63

In computer security, compromised computers that act under the direction of an external master computer are referred to as ________ .

Question 64

Recovery after a disaster involves installing the most recent ________ backup copy .

Question 65

Information that is recorded to hide its true meaning uses ________ .

Question 66

A benign-sounding software download which performs malicious activities is called a ________ .

Question 67

A program that creates an access path through which attackers can run any program they want is called a ________ .

Question 68

The right to block or limit online information about offenses that took place very long ago or accusations that have been disproven is called the right to be ________ .

Question 69

The type of authentication that combines two things out of three possibilities, rather than just a single password, to allow a user access is known as ________ authentication .