Question 1

A __________ is similar to a __________,except that it is a program rather than a code segment hidden in a host program.
A)worm; virus
B)Trojan horse; worm
C)worm; Trojan horse
D)virus; worm

Accepted Answer

A worm is similar to a virus in that both are types of malware. However, a worm is a standalone malware program that can replicate itself to spread to other computers, whereas a virus requires a host program to spread.

Question 2

Illegally obtaining and using confidential information about a person for economic gain
A)Eavesdropping
B)Identity theft
C)Packet sniffing
D)Piggybacking

Accepted Answer

Identity theft involves illegally obtaining and using confidential information about a person for economic gain, such as opening fraudulent accounts, making purchases, or accessing personal information. Eavesdropping, packet sniffing, and piggybacking are all forms of unauthorized network access but do not necessarily involve economic gain through the theft of confidential information.

Question 3

When a computer criminal gains access to a system by searching records or the trash of the target company,this is referred to as
A)data diddling.
B)dumpster diving.
C)eavesdropping.
D)piggybacking.

Accepted Answer

Dumpster diving is the act of going through the trash or discarded materials of a company in order to gain information or access to their systems.

Question 4

Tapping into a communications line and then entering the system by accompanying a legitimate user without their knowledge is called
A)superzapping.
B)data leakage.
C)hacking.
D)piggybacking.

Accepted Answer

The act of tapping into a communications line and then entering the system by accompanying a legitimate user without their knowledge is known as piggybacking. Superzapping refers to the process of bypassing standard system controls to gain unauthorized access to data, while data leakage refers to the inadvertent or intentional release of sensitive information. Hacking refers to the use of technology to gain unauthorized access to a computer or network.

Question 5

Computer fraud perpetrators have developed many methods to commit their acts.One way is to modify programs during systems development allowing access into the system that bypasses normal system controls.This is known as
A)a Trojan horse.
B)a trap door.
C)the salami technique.
D)superzapping.

Accepted Answer

Modifying programs during development to bypass normal system controls is commonly known as a trap door. A Trojan horse is a type of malware that is disguised as a legitimate program to deceive users. The salami technique is a method of stealing small amounts of money over time, and superzapping is a technique used to access and manipulate mainframe computer data. Therefore, (B) is the correct answer.

Question 6

Which type of antivirus program is most effective in spotting an infection soon after it starts?
A)a virus protection program
B)a virus identification program
C)a virus detection program
D)none of the above

Accepted Answer

The answer of Which type of antivirus program is most...

Question 7

The unauthorized use of special system programs to bypass regular system controls and perform illegal act is called
A)a Trojan horse.
B)a trap door.
C)the salami technique.
D)superzapping.

Accepted Answer

Superzapping is the unauthorized use of system programs to bypass regular system controls and perform illegal acts, such as accessing or altering sensitive data. Trojans, trap doors, and the salami technique are also methods used for unauthorized access to systems, but they do not specifically involve the use of system programs.

Question 8

A fraud technique that slices off tiny amounts from many projects is called the __________ technique.
A)Trojan horse
B)round down
C)salami
D)trap door

Accepted Answer

The salami technique involves stealing small amounts from many projects, much like slicing thin pieces of salami. This allows the fraudster to avoid detection because the losses are too small to notice on their own, but can add up to a significant amount over time. The other options listed are types of malware or security vulnerabilities, but do not specifically relate to this fraud technique.

Question 9

Which of the following is not a method of identify theft
A)Scavenging
B)Phishing
C)Shoulder surfing
D)Phreaking

Accepted Answer

Phreaking is not a method of identity theft. It refers to the act of exploiting a vulnerability in a telecommunications system to make free calls or disrupt service.

Question 10

How can an organization reduce fraud losses?
A)encrypt data and programs
B)use forensic accountants
C)maintain adequate insurance
D)require vacations and rotate duties

Accepted Answer

The answer of How can an organization reduce fraud losses?
A)encrypt...

Question 11

Which method of fraud is physical in its nature rather than electronic?
A)cracking
B)hacking
C)eavesdropping
D)scavenging

Accepted Answer

Scavenging involves physically searching through trash or discarded items to find sensitive information like credit card numbers or personal identification numbers. This method does not involve electronic devices or hacking skills.

Question 12

A fraud technique that allows the hacker to bypass normal system controls and enter a secured system is called
A)superzapping.
B)data diddling.
C)using a trap door.
D)piggybacking.

Accepted Answer

Using a trapdoor involves exploiting a hidden and unauthorized entry point into a computer system. The attacker can use this method to bypass normal system controls and gain access to a secured system. Superzapping and data diddling are types of unauthorized data manipulation, and piggybacking involves following an authorized user into a secured area or system.

Question 13

A part of a program that remains idle until some date or event occurs and then is activated to cause havoc in the system is a
A)trap door.
B)data diddle.
C)logic bomb.
D)virus.

Accepted Answer

A logic bomb is a code segment that remains dormant until triggered by an event, such as a specific date or the insertion of a certain code. Once triggered, it carries out a malicious action, such as deleting or corrupting data.

Question 14

Spyware is
A)Software that tells the user if anyone is spying on his computer
B)Software that monitors whether spies are looking at the computer
C)Software that monitors computing habits and sends the data it gathers to someone else
D)None of the above

Accepted Answer

Spyware is software that is designed to collect a user's personal information or monitor their activity without their knowledge or consent. This collected data is then sent to a third party. Therefore, option C accurately describes what spyware does. Options A and B are incorrect as they refer to software that detects spyware instead of being spyware itself. Option D is incorrect as there is a correct answer among the given options.

Question 15

The unauthorized access to and use of computer systems
A)Hacking
B)Hijacking
C)Phreaking
D)Sniffing

Accepted Answer

Hacking refers to the unauthorized access to and use of computer systems. Hijacking refers to the unauthorized control of a communication channel. Phreaking refers to the manipulation of telecommunications systems. Sniffing refers to the interception of network traffic for the purpose of collecting sensitive information.

Question 16

A set of unauthorized computer instructions in an otherwise properly functioning program
A)Logic bomb
B)Spyware
C)Trap door
D)Trojan horse

Accepted Answer

The answer of A set of unauthorized computer instructions in...

Question 17

Gaining control of someone else's computer to carry out illicit activities without the user's knowledge
A)Hacking
B)Hijacking
C)Phreaking
D)Sniffing

Accepted Answer

Hijacking refers to taking control of someone else's computer or network without their knowledge or consent to carry out illicit activities. Hacking refers to gaining unauthorized access to a computer system or network, but it may not necessarily involve taking control of it. Phreaking refers to exploiting weaknesses in a phone system to make free calls or gain unauthorized access, while sniffing refers to intercepting and analyzing network traffic to obtain sensitive information.

Question 18

Which of the following is the easiest method for a computer criminal to steal output without ever being on the premises?
A)dumpster diving
B)by use of a Trojan horse
C)using a telescope to peer at paper reports
D)electronic eavesdropping on computer monitors

Accepted Answer

Electronic eavesdropping on computer monitors can be done remotely, without physically being on the premises, and allows the criminal to steal output in real-time. Dumpster diving and using a telescope require physical access to the premises, and a Trojan horse typically involves gaining access to the computer system through hacking or social engineering tactics.

Question 19

The deceptive method by which a perpetrator gains access to the system by pretending to be an authorized user is called __________.
A)cracking.
B)masquerading.
C)hacking.
D)superzapping.

Accepted Answer

Masquerading, also known as "spoofing," involves an attacker disguising themselves as an authorized user in order to gain access to the system. This can be done through a variety of means, such as stealing login credentials or impersonating someone through social engineering tactics. Cracking refers to the process of bypassing security measures, while hacking can refer to a broader range of activities related to computer and network security. Superzapping is a term used in mainframe computing and refers to a privileged mode that allows direct access to system resources.

Question 20

Computer fraud perpetrators who use telephone lines to commit fraud and other illegal acts are typically called
A)hackers.
B)crackers.
C)phreakers.
D)jerks.

Accepted Answer

The term "phreaking" originated in the 1970s to describe the exploration of the telephone network and manipulation of the telephone system to make free long-distance calls. Today, phreakers can use the telephone to perpetrate various types of computer fraud and other criminal activities. Hackers and crackers typically use the internet to commit cybercrimes. "Jerks" is not a common term used to describe computer fraud perpetrators.

Quiz 5: Computer Fraud and Security

A is similar to a ,except that it is a program rather than a code segment hidden in a host program.

Illegally obtaining and using confidential information about a person for economic gain

When a computer criminal gains access to a system by searching records or the trash of the target company,this is referred to as

Tapping into a communications line and then entering the system by accompanying a legitimate user without their knowledge is called

Computer fraud perpetrators have developed many methods to commit their acts.One way is to modify programs during systems development allowing access into the system that bypasses normal system controls.This is known as

Which type of antivirus program is most effective in spotting an infection soon after it starts?

The unauthorized use of special system programs to bypass regular system controls and perform illegal act is called

A fraud technique that slices off tiny amounts from many projects is called the __________ technique.

Which of the following is not a method of identify theft

How can an organization reduce fraud losses?

Which method of fraud is physical in its nature rather than electronic?

A fraud technique that allows the hacker to bypass normal system controls and enter a secured system is called

A part of a program that remains idle until some date or event occurs and then is activated to cause havoc in the system is a

Spyware is

The unauthorized access to and use of computer systems

A set of unauthorized computer instructions in an otherwise properly functioning program

Gaining control of someone else's computer to carry out illicit activities without the user's knowledge

Which of the following is the easiest method for a computer criminal to steal output without ever being on the premises?

The deceptive method by which a perpetrator gains access to the system by pretending to be an authorized user is called __________.

Computer fraud perpetrators who use telephone lines to commit fraud and other illegal acts are typically called