Question 1

An intrusion detection system can perform all of the following functions except:

Accepted Answer

A) examining network traffic. 
B) setting off an alarm when suspicious activity is detected. 
C) checking network traffic to see if it matches certain patterns or preconfigured rules. 
D) blocking suspicious activity.

Question 2

Which of the following is an example of an integrity violation of e-commerce security?

Accepted Answer

A) A Web site is not actually operated by the entity the customer believes it to be. 
B) A merchant uses customer information in a manner not intended by the customer. 
C) A customer denies that he or she is the person who placed the order. 
D) An unauthorized person intercepts an online communication and changes its contents.

Question 3

The most common form of securing a digital channel of communication is ________.

Accepted Answer

The answer of The most common form of securing a...

Question 4

Discuss the security of communications channels.Include definitions and explanations for the terms Secure Sockets Layer/Transport Layer Security (SSL/TLS), secure negotiated session, session key, and VPN.

Accepted Answer

The answer of Discuss the security of communications channels.Include definitions...

Question 5

Online bill payments are believed to cost ________ to process compared to ________ for paper bills.

Accepted Answer

A) 20 to 30 cents, $3 to $7 
B) $1 to $2, $10 to $20 
C) 3 to $7, 20 to 30 cents 
D) $10 to $20, $ 1 to $2

Question 6

Which of the following is not a key point of vulnerability when dealing with e-commerce?

Accepted Answer

A) the client computer 
B) the server 
C) the communications pipeline 
D) the credit card companies

Question 7

The research firm Cybersource estimated that online credit card fraud in the United States amounted to about ________ in 2012.

Accepted Answer

A) $35 million 
B) $350 million 
C) $3.5 billion 
D) $35 billion

Question 8

________ refers to the ability to ensure that e-commerce participants do not deny their online actions.

Accepted Answer

A) Nonrepudiation 
B) Authenticity 
C) Availability 
D) Integrity

Question 9

________ refers to the ability to identify the person or entity with whom you are dealing on the Internet.

Accepted Answer

A) Nonrepudiation 
B) Authenticity 
C) Availability 
D) Integrity

Question 10

Which of the following is a prominent hacktivist group?

Accepted Answer

A) Anonymous 
B) Anti-Phishing Working Group 
C) IC3 
D) Symantec

Question 11

Linden Dollars, created for use in Second Life, are an example of:

Accepted Answer

A) digital cash. 
B) virtual currency. 
C) EBPP. 
D) peer-to-peer payment systems.

Question 12

A(n)________ is a hacker that believes he or she is pursing some greater good by breaking in and revealing system flaws.

Accepted Answer

The answer of A(n)________ is a hacker that believes he...

Question 13

Which of the following dimensions of e-commerce security is not provided for by encryption?

Accepted Answer

A) confidentiality 
B) availability 
C) message integrity 
D) nonrepudiation

Question 14

Which of the following countries has been found to have engaged in cyberespionage against Google?

Accepted Answer

A) Russia 
B) China 
C) Iran 
D) Iraq

Question 15

Software that is used to obtain private user information such as a user's keystrokes or copies of e-mail is referred to as:

Accepted Answer

A) spyware. 
B) a backdoor. 
C) pupware. 
D) adware.

Question 16

Most of the world's spam is delivered via which of the following?

Accepted Answer

A) viruses 
B) worms 
C) Trojan horses 
D) botnets

Question 17

Symmetric key encryption is also known as:

Accepted Answer

A) public key encryption. 
B) secret key encryption. 
C) PGP. 
D) PKI.

Question 18

All of the following statements about public key encryption are true except:

Accepted Answer

A) public key encryption uses two mathematically related digital keys. 
B) public key encryption ensures authentication of the sender. 
C) public key encryption does not ensure message integrity. 
D) public key encryption is based on the idea of irreversible mathematical functions.

Question 19

A(n)________ vulnerability involves a vulnerability unknown to security experts that is actively exploited before there is a patch available.

Accepted Answer

The answer of A(n)________ vulnerability involves a vulnerability unknown to...

Question 20

A digital certificate contains all of the following except the:

Accepted Answer

A) subject's private key. 
B) subject's public key. 
C) digital signature of the certification authority. 
D) digital certificate serial number.

Exam 5: E-Commerce Security and Payment Systems