Question 1

Biometric systems are authentication systems that identify a person by measurement of a biological characteristic,such as fingerprints,iris patterns,facial features,or voice.

Accepted Answer

A) True 
 B)False

Question 2

A cyberwarrior is a person who intentionally carries out crimes over the Internet.

Accepted Answer

A) True 
 B)False

Question 3

The large number of possible key values created by the algorithm to use when transforming the message best describes

Accepted Answer

A)  determinate. 
B)  encryption code. 
C)  encryption lock. 
D)  key space.

Question 4

Each of the following is a characteristic of access control except

Accepted Answer

A)  access control determines which persons, programs, or machines can legitimately use a network resource and which resources he, she, or it can use. 
B)  access control lists (ACLs) define users' rights, such as what they are allowed to read, view, write, print, copy, delete, execute, modify, or move. 
C)  all resources need to be considered together to identify the rights of users or categories of users. 
D)  after a user has been identified, the user must be authenticated.

Question 5

Exposure is the estimated cost,loss,or damage that can result if a threat exploits a vulnerability.

Accepted Answer

A) True 
 B)False

Question 6

Define biometric system.Identify four common biometrics.

Accepted Answer

The answer of Define biometric system.Identify four common biometrics....

Question 7

The estimated cost,loss,or damage that can result if a threat exploits a vulnerability best describes

Accepted Answer

A)  total cost of ownership. 
B)  present value of risk. 
C)  exposure. 
D)  risk feasibility assessment.

Question 8

The assurance that an online customer or trading partner cannot falsely deny their purchase or transaction is referred to as

Accepted Answer

A)  integrity. 
B)  availability. 
C)  authentication. 
D)  nonrepudiation.

Question 9

The probability that a vulnerability will be known and used best describes

Accepted Answer

A)  risk. 
B)  feasibility. 
C)  security fault. 
D)  splog point.

Question 10

A cyberwar occurs when computers are set up to attack other computers in the same or other organizations.

Accepted Answer

A) True 
 B)False

Question 11

Unintentional threats include each of the following except

Accepted Answer

A)  human errors. 
B)  environmental hazards. 
C)  computer system malfunctions. 
D)  identity theft.

Question 12

________ systems are highly useful for both law enforcement and for law breaking,for example,by providing a means to obtain passwords or encryption keys and thus bypassing other security measures.

Accepted Answer

A)  Biometric 
B)  Keystroke logging 
C)  Access control 
D)  Intrusion detection

Question 13

The process of verifying the real identity of an individual,computer,computer program,or EC website best defines

Accepted Answer

A)  vulnerability assessment. 
B)  security audit. 
C)  authentication. 
D)  authorization.

Question 14

A plan that keeps the business running after a disaster occurs best defines

Accepted Answer

A)  security audit specifications. 
B)  business continuity plan. 
C)  vulnerability assessment plan. 
D)  project initiation plan.

Question 15

An exercise that determines the impact of losing the support of an EC resource to an organization and establishes the escalation of that loss over time,identifies the minimum resources needed to recover,and prioritizes the recovery of processes and supporting systems best describes

Accepted Answer

A)  business continuity plan. 
B)  business impact analysis. 
C)  vulnerability assessment. 
D)  computer security incident management.

Question 16

Fraud is aimed mostly against organizations.

Accepted Answer

A) True 
 B)False

Question 17

A software program that runs independently,consuming the resources of its host in order to maintain itself,that is capable of propagating a complete working version of itself onto another machine best describes

Accepted Answer

A)  splog. 
B)  tidal wave. 
C)  Trojan horse. 
D)  worm.

Question 18

Key logs provide the means to reconstruct what specific actions have occurred and may help EC security investigators identify the person or program that performed unauthorized actions.

Accepted Answer

A) True 
 B)False

Question 19

A method used to ensure confidentiality and integrity of data transmitted over the Internet by encrypting data packets,sending them in packets across the Internet,and decrypting them at the destination address best defines

Accepted Answer

A)  data wrapping. 
B)  message envelope. 
C)  protocol tunneling. 
D)  Trojan horse.

Question 20

General controls are intended to protect specific applications.

Accepted Answer

A) True 
 B)False

Exam 9: E-Commerce Security and Fraud Protection

Biometric systems are authentication systems that identify a person by measurement of a biological characteristic,such as fingerprints,iris patterns,facial features,or voice.

A cyberwarrior is a person who intentionally carries out crimes over the Internet.

The large number of possible key values created by the algorithm to use when transforming the message best describes

Each of the following is a characteristic of access control except

Exposure is the estimated cost,loss,or damage that can result if a threat exploits a vulnerability.

Define biometric system.Identify four common biometrics.

The estimated cost,loss,or damage that can result if a threat exploits a vulnerability best describes

The assurance that an online customer or trading partner cannot falsely deny their purchase or transaction is referred to as

The probability that a vulnerability will be known and used best describes

A cyberwar occurs when computers are set up to attack other computers in the same or other organizations.

Unintentional threats include each of the following except

________ systems are highly useful for both law enforcement and for law breaking,for example,by providing a means to obtain passwords or encryption keys and thus bypassing other security measures.

The process of verifying the real identity of an individual,computer,computer program,or EC website best defines

A plan that keeps the business running after a disaster occurs best defines

An exercise that determines the impact of losing the support of an EC resource to an organization and establishes the escalation of that loss over time,identifies the minimum resources needed to recover,and prioritizes the recovery of processes and supporting systems best describes

Fraud is aimed mostly against organizations.

A software program that runs independently,consuming the resources of its host in order to maintain itself,that is capable of propagating a complete working version of itself onto another machine best describes

Key logs provide the means to reconstruct what specific actions have occurred and may help EC security investigators identify the person or program that performed unauthorized actions.

A method used to ensure confidentiality and integrity of data transmitted over the Internet by encrypting data packets,sending them in packets across the Internet,and decrypting them at the destination address best defines

General controls are intended to protect specific applications.