Deck 10: Electronic Commerce Security

Question 1

Java is a programming language used widely in Web pages to provide active content.

Answer 1

True

Question 2

When Java applets are run within the constraints of the sandbox, they have full access to the client computer.

Answer 2

False

Question 3

The element of necessity in computer security refers to preventing data delays or denials (removal).

Answer 3

True

Question 4

Any message traveling on the Internet is subject to secrecy, integrity, and necessity threats.

Question 5

A digital certificate for software can attest to the quality of the software.

Question 6

Threats that are deemed low risk and unlikely to occur can be ignored when the cost to protect against the threat exceeds the value of the protected asset.

Question 7

When a Windows-based Web browser downloads a Web page containing an embedded ActiveX control, the control is executed on the client computer.

Question 8

Digital certificates never expire.

Question 9

Worms can spread quickly through the Internet.

Question 10

Absolute security is relatively easy to achieve.

Question 11

JavaScript can be used to record the URLs of Web pages a user visits.

Question 12

Developers use active content because it extends the functionality of HTML and moves some data processing chores from the busy server machine to the user's client computer.

Question 13

One significant threat to electronic commerce is theft of sensitive or personal information.

Question 14

Active content is launched in a Web browser automatically when that browser loads a Web page containing active content.

Question 15

Secrecy protection is a legal matter.

Question 16

Java applets operating in a sandbox can perform file input, output, or delete operations.

Question 17

Message packets on the Internet travel a planned path from a source node to a destination node.

Question 18

The most complete way for Web site visitors to protect themselves from revealing private information or being tracked by cookies is to disable cookies entirely.

Question 19

The best-known active content forms are crackers and ActiveScript.

Question 20

JavaScript programs, like Java applets, operate under the restrictions of the Java sandbox security model.

Question 21

____ refers to protecting against unauthorized data disclosure and ensuring the authenticity of the data source.

A)Necessity
B)Secrecy
C)Integrity
D)Encryption

Question 22

The shorter the session key, the more resistant the encryption is to attack.

Question 23

Java is a programming language developed by ____.

A)Microsoft
B)IBM
C)Oracle
D)Sun Microsystems

Question 24

The purpose of a(n)____ is to provide a way for a third-party Web site to place cookies from that third-party site on a visitor's computer.

A)ACL
B)digital ID
C)Web bug
D)gateway server

Question 25

Any act or object that poses a danger to computer assets is known as a ____.

A)problem
B)concern
C)threat
D)risk

Question 26

ActiveX controls run only on computers with ____ operating systems.

A)Windows
B)Linux
C)UNIX
D)Mac

Question 27

A Web browser that has entered into an SSL session indicates that it is in an encrypted session.

Question 28

____ refers to preventing data delays or denials.

A)Integrity
B)Secrecy
C)Necessity
D)Readiness

Question 29

The protection of assets using nonphysical means is called ____ security.

A)virtual
B)logical
C)computer
D)nonphysical

Question 30

A(n)____ is an object that contains programs and properties that Web designers place on Web pages to perform particular tasks.

A)objective
B)Java++
C)ActiveX control
D)plug-in

Question 31

E-mail secrecy issues address whether company supervisors should be permitted to read employees' messages randomly.

Question 32

A(n)____ is a small application program.

A)applet
B)buffer
C)runner
D)procedure

Question 33

A(n)____ is a person or device that is able to listen in on and copy Internet transmissions.

A)eavesdropper
B)surveillor
C)dropper
D)listener

Question 34

____ refers to preventing unauthorized data modification.

A)Integrity
B)Secrecy
C)Necessity
D)Completeness

Question 35

A computer that has experienced a necessity threat slows processing to an intolerably slow speed.

Question 36

Originally, the term ____ was used to describe a dedicated programmer who enjoyed writing complex code that tested the limits of technology.

A)eavesdropper
B)hacker
C)cracker
D)wardriver

Question 37

A(n)____ is a program hidden inside another program or Web page that masks its true purpose.

A)mask program
B)Trojan horse
C)hidden route
D)insider program

Question 38

____ is the protection of computer assets from unauthorized access, use, alteration, or destruction.

A)Computer security
B)Computer risk
C)Access security
D)Logical security

Question 39

One disadvantage of private-key systems is that encryption and decryption are significantly slower than public-key systems.

Question 40

____ refers to programs that are embedded transparently in Web pages and that cause action to occur.

A)Action page
B)Active content
C)Dynamic content
D)Activity control

Question 41

____ is an area of memory set aside to hold data read from a file or database.

A)RAM
B)A cookie
C)A buffer
D)Main memory

Question 42

A(n)____________________ cookie originates from a Web site other than the site being visited.

Question 43

____________________ cookies exists until the Web client ends the connection.

Question 44

A Web ____________________ is a tiny graphic that a third-party Web site places on another site's Web page.

Question 45

A Web server can compromise ____ if it allows automatic directory listings.

A)necessity
B)integrity
C)secrecy
D)authenticity

Question 46

____ is the protection of individual rights to nondisclosure.

A)Secrecy
B)Privacy
C)Necessity
D)Sensitivity

Question 47

Software applications called ____ provide the means to record information that passes through a computer or router that is handling Internet traffic.

A)intruder programs
B)copier programs
C)sniffer programs
D)backdoor programs

Question 48

Any organization concerned about protecting its electronic commerce assets should have a(n)____________________ in place.

Question 49

A(n)____ allows anyone with knowledge of its existence to cause damage by observing transactions, deleting data, or stealing data.

A)sniffer
B)backdoor
C)tunnel
D)opener

Question 50

____________________ cookies remain on the client machine indefinitely.

Question 51

____________________ is used in electronic commerce to place items into a shopping cart and compute a total invoice amount, including sales tax, handling, and shipping costs.

Question 52

____ is the electronic defacing of an existing Web site's page.

A)Masquerading
B)Steganography
C)Cybersquatting
D)Cybervandalism

Question 53

A(n)____ is software that attaches itself to another program and can cause damage when the host program is activated.

A)applet
B)cookie
C)virus
D)message digest

Question 54

Cookies can be placed on the client computer by the Web server site, in which case they are called ____________________ cookies.

Question 55

____ is pretending to be someone you are not or representing a Web site as an original when it is really a fake.

A)Hash coding
B)Spoofing
C)Cybersquatting
D)Warchalking

Question 56

The term ____ describes the process of hiding information within another piece of information.

A)ACL
B)steganography
C)firewall
D)decryption

Question 57

____________________ is the general name for a procedure, either physical or logical, that recognizes, reduces, or eliminates a threat.

Question 58

A(n)____________________ occurs when an Internet e-mail message is intercepted and its contents are changed before it is forwarded to its original destination.

Question 59

____________________ security means having all security measures working together to prevent unauthorized disclosure, destruction, or modification of assets.

Question 60

____ encryption encodes a message with an algorithm that uses a single numeric key, such as 456839420783, to encode and decode data.

A)Hash coding
B)Symmetric
C)Asymmetric
D)Transformative

Question 61

A(n)____________________ is simply a number that is used with the encryption algorithm to "lock" the characters of the message being protected so that they are undecipherable without the key.

Question 62

The process of proposing and accepting (or rejecting)various transmission conditions is called session ____________________.

Question 63

A(n)____________________ security device is one that uses an element of a person's biological makeup to perform the identification.

Question 64

What are the six main elements included on a digital certificate?

Question 65

The program that transforms normal text into cipher text is called a(n)____________________ program.

Question 66

A(n)____________________ is an attachment to an e-mail message or program embedded in a Web page that verifies that the sender or Web site is who it claims to be.

Question 67

What is the difference between a virus and a worm?

Question 68

Asymmetric encryption is also known as ____________________ encryption.

Question 69

____________________ Java applets are those that have not been established as secure.

Question 70

____________________ exists when an unauthorized party can alter a message stream of information.

Question 71

____________________ is the coding of information by using a mathematically based program and a secret key to produce a string of characters that is unintelligible.

Question 72

In some cities that have large concentrations of wireless networks, attackers, called ____________________, drive around in cars using their wireless-equipped laptop computers to search for accessible networks.

Question 73

______________________________ are the computers on the Internet that maintain directories that link domain names to IP addresses.

Question 74

Briefly describe the requirements for secure electronic commerce.

Question 75

Apps that contain malware or that collect information from the mobile device and forward it to perpetrators are called a(n)____________________ app.

Question 76

A(n)____________________ is a Trojan horse that secretly takes over another computer for the purpose of launching attacks on other computers.

Question 77

The science that studies encryption is called ____________________.

Question 78

____________________ are programs that enhance the capabilities of browsers.

Question 79

Describe the security dangers inherent in ActiveX controls.

Question 80

How might a buffer in a Web server cause security threats?