Deck 10: Electronic Commerce Security

Question 1

Java applets operating in a sandbox can perform file input, output, or delete operations.

Answer 1

False

Question 2

Active content elements are programs that run on the server.

Answer 2

False

Question 3

Active content can be delivered as an e-mail attachment.

Answer 3

True

Question 4

Threats that are unlikely to occur can be ignored when the cost to protect against the threat exceeds the value of the protected asset.

Question 5

In the context of encryption, shorter keys usually provide significantly better protection than longer keys.

Question 6

One significant threat to electronic commerce is theft of sensitive or personal information.

Question 7

In the context of the elements of computer security, necessity refers to preventing data delays or denials.

Question 8

The most complete way for Web site visitors to protect themselves from revealing private information or being tracked by cookies is to disable cookies entirely.

Question 9

Applets typically run within the Web browser and are most often written in the Java programming language.

Question 10

People who write programs or manipulate technologies to obtain unauthorized access to computers and networks are called crackers.

Question 11

Persistent cookies refer to the category of cookies which exist until the Web client ends the connection.

Question 12

Worms can spread quickly through the Internet.

Question 13

Signed code or messages serve the same function as a photo on a driver's license or passport.

Question 14

A digital certificate contains a means to send an encrypted message to the entity that sent the original Web page or e-mail message.

Question 15

Active content is launched in a Web browser automatically prior to the browser loading the Web page containing active content.

Question 16

Active content can pose a threat to the security of client devices.

Question 17

The path taken by a message packet from a source node to a destination node can be controlled by Internet users.

Question 18

A Trojan horse erasing or altering information in a client computer is said to be a secrecy violation.

Question 19

Any message traveling on the Internet is subject to secrecy, integrity, and necessity threats.

Question 20

Message packets on the Internet travel a planned path from a source node to a destination node.

Question 21

A(n) _____ is a small application program that typically runs within a Web browser.

A) applet
B) buffer
C) white hat hacker
D) black hat hacker

Question 22

In the context of computer security, the protection of assets using nonphysical means is called _____.

A) eavesdropping
B) logical security
C) tangible security
D) phishing

Question 23

ActiveX controls run only on computers with _____ operating systems.

A) Windows
B) Linux
C) UNIX
D) Mac

Question 24

_____ refers to preventing unauthorized data modification.

A) Integrity
B) Secrecy
C) Necessity
D) Completeness

Question 25

In the context of categorizing cookies in terms of their time duration, _____ are cookies which exist until the Web client ends the connection.

A) first-party cookies
B) persistent cookies
C) third-party cookies
D) session cookies

Question 26

Networks outside a firewall are referred to as trusted networks.

Question 27

A _____ is a written statement describing which assets to protect and why they are being protected, who is responsible for that protection, and which behaviors are acceptable and which are not.

A) plain text
B) cypher text
C) security policy
D) digital signature

Question 28

_____ is the protection of computer assets from unauthorized access, use, alteration, or destruction.

A) Computer security
B) Computer risk
C) Spamming
D) Phishing

Question 29

The Computer Emergency Response Team (CERT) is the most prominent organization that promotes computer security.

Question 30

A passphrase is a sequence of words of text that is easy to remember, but not complex enough to serve as a good password.

Question 31

A(n) _____ is a person or device that is able to listen in on and copy Internet transmissions.

A) eavesdropper
B) white hat hacker
C) black hat hacker
D) cracker

Question 32

_____ refers to protecting against unauthorized data disclosure and ensuring the authenticity of the data source.

A) Necessity
B) Secrecy
C) Integrity
D) Encryption

Question 33

The purpose of a _____ is to provide a way for a third-party Web site to place cookies from that third-party site on a visitor's computer.

A) personal firewall
B) digital certificate
C) Web bug
D) gateway server

Question 34

Any act or object that poses a danger to computer assets is known as a _____.

A) countermeasure
B) bug
C) threat
D) code

Question 35

Backdoor is a program that protects information from unauthorized access.

Question 36

JavaScript and VBScript are _____, which provide commands that are executed on the client.

A) plug-ins
B) scripting languages
C) Web bugs
D) session cookies

Question 37

A _____ is a program hidden inside another program or Web page that masks its true purpose.

A) remote wipe
B) Trojan horse
C) digital certificate
D) wardriver

Question 38

One disadvantage of private-key systems is that encryption and decryption are significantly slower than public-key systems.

Question 39

A(n) _____ is an object that contains programs and properties that Web designers place on Web pages to perform particular tasks.

A) persistent cookie
B) dead link
C) ActiveX control
D) session cookie

Question 40

A Web browser that has entered into a Secure Socket Layer session indicates that it is in an encrypted session.

Question 41

Software applications called _____ provide the means to record information that passes through a computer or router that is handling Internet traffic.

A) remote wipes
B) digital certificates
C) sniffer programs
D) plug-ins

Question 42

_____ is the electronic defacing of an existing Web site's page.

A) Spamming
B) Masquerading
C) Phishing
D) Cybervandalism

Question 43

A(n) _____ cookie originates from a Web site other than the site being visited.

Question 44

A(n) _____ occurs when an Internet e-mail message is intercepted and its contents are changed before it is forwarded to its original destination.

Question 45

In the context of elements of a security policy, _____ refers to the secure identification of clients and servers with digital signatures and certificates.

Question 46

A ___________ encapsulates and encrypts the message which provides secrecy, integrity and client/sever authentication.

A) digital signature
B) secure envelope
C) private key
D) cipher text

Question 47

_____ encodes a message with an algorithm that uses a single numeric key to encode and decode data.

A) Hash coding
B) Symmetric encryption
C) Public-key encryption
D) Decrypting

Question 48

_____ is pretending to be someone you are not or representing a Web site as an original when it is really a fake.

A) Hash coding
B) Spoofing
C) Warchalking
D) Cybervandalism

Question 49

Firewalls that filter traffic based on the application requested are.

A) packet filter firewalls
B) proxi seerver firewall
C) gateway servers
D) intrusion detection systems

Question 50

A _____ is an area of memory set aside to hold data read from a file or database.

A) firewall
B) cookie
C) buffer
D) worm

Question 51

_____ are computer sleuths who are hired to probe PCs and locate information that can be used in legal proceedings.

A) Wardrivers
B) Computer forensics experts
C) Crackers
D) Hackers

Question 52

The term _____ describes the process of hiding information within another piece of information.

A) wiretapping
B) steganography
C) authentication
D) decryption

Question 53

Cookies are categorized as session or persistent based on _____.

Question 54

A(n) _____ is a software that attaches itself to another program and can cause damage when the host program is activated.

A) applet
B) browser plug-in
C) virus
D) message digest

Question 55

A _____ is a number that summarizes an encrypted information.

A) digital certificate
B) hash function
C) message digest
D) hash algorithm

Question 56

A(n) _____ is a procedure that recognizes, reduces, or eliminates a threat.

Question 57

First-party cookies and third-party cookies represent classification of cookies by their _____.

Question 58

_____ is the protection of individual rights to nondisclosure.

A) Secrecy
B) Privacy
C) Necessity
D) Sensitivity

Question 59

Cookies placed on a client computer by a Web server site are called _____.

Question 60

A _____ is an element of a program that allows users to run the program without going through the normal authentication procedure for access to the program.

A) rogue app
B) backdoor
C) worm
D) remote wipe

Question 61

Briefly describe the requirements for secure electronic commerce.

Question 62

When a Trojan horse has taken over a large number of computers, the person who planted the virus can take control of all the computers and form a(n) _____.

Question 63

The process of proposing and accepting various transmission conditions is called _____.

Question 64

A(n) _____ is a Trojan horse that secretly takes over another computer for the purpose of launching attacks on other computers.

Question 65

The program that transforms normal text into cipher text is called a(n) _____.

Question 66

_____ is the coding of information by using a mathematically based program and a secret key to produce a string of characters that is unintelligible.

Question 67

_____ encryption encodes messages by using two mathematically related numeric keys.

Question 68

Most browsers allow users to limit the actions taken by Java applets and scripting languages by running them in a(n) _____, which is a functional subset of the full browser.

Question 69

A(n) _____ is usually a long binary number that is used with the encryption algorithm to "lock" the characters of the message being protected so that they are undecipherable without the number.

Question 70

In some cities that have large concentrations of wireless networks, attackers, called _____, drive around in cars using their wireless-equipped laptop computers to search for accessible networks.

Question 71

A(n) _____ is a type of virus that replicates itself on the computers that it infects.

Question 72

A(n) _____ is an attachment to an e-mail message or program embedded in a Web page that verifies that the sender or Web site is who it claims to be.

Question 73

Browser _____ are programs that enhance the capabilities of browsers, handle Web content that a browser cannot handle.

Question 74

The purpose of a(n) _____ is to disrupt normal computer processing, or deny processing entirely.

Question 75

A(n) _____ security device is one that uses an element of a person's biological makeup to perform identification.

Question 76

An integrity threat, also known as _____, exists when an unauthorized party can alter a message stream of information.

Question 77

The science that studies encryption is called _____.

Question 78

Apps that contain malware or that collect information from a mobile device and forward it to perpetrators are called _____.

Question 79

_____ are the computers on the Internet that maintain directories that link domain names to IP addresses.

Question 80

​A ___________ virus can enter a computer system in several different ways.