Question 1

What is the most important aspect of internal control?

Accepted Answer

A)  Audit committee 
B)  Control policies 
C)  Control system 
D)  Personnel 
A)  Audit committee 
B)  Control policies 
C)  Control system 
D)  Personnel D

Question 2

Which of the following activities would be the least practical for a fraud examiner?

Accepted Answer

A)  Gaining an understanding of the tools and methods perpetrators use in e-business fraud 
B)  Gaining a working knowledge of computer networking systems 
C)  Learning the strengths and weaknesses of Windows 
D)  Getting to know each company employee's interactions with the systems 
A)  Gaining an understanding of the tools and methods perpetrators use in e-business fraud 
B)  Gaining a working knowledge of computer networking systems 
C)  Learning the strengths and weaknesses of Windows 
D)  Getting to know each company employee's interactions with the systems D

Question 3

Which of the following refers to the tactic of keeping security holes, encryption algorithms, and processes secret to confuse attackers?

Accepted Answer

A)  Authorization control 
B)  Secure socket layer 
C)  Security through obscurity 
D)  Biometrics 
A)  Authorization control 
B)  Secure socket layer 
C)  Security through obscurity 
D)  Biometrics C

Question 4

In an electronic environment, no other control can better prevent fraud than the wise use of .

Accepted Answer

A)  digital certificates 
B)  biometrics 
C)  anti-virus software 
D)  passwords 
A)  digital certificates 
B)  biometrics 
C)  anti-virus software 
D)  passwords

Question 5

What is the term for a technique in which hackers go to known business traveler locations like airports and set up access points (which look like regular wireless networks) through their laptops to the Internet?

Accepted Answer

A)  Social engineering 
B)  Spoofing 
C)  Phishing 
D)  Wartrapping 
A)  Social engineering 
B)  Spoofing 
C)  Phishing 
D)  Wartrapping

Question 6

A hacker sends a database command after regular data in an online submission form. This command inserts an unauthorized record giving access to the hacker. Which risk is being discussed here?

Accepted Answer

A)  SQL injection 
B)  HTML 
C)  Cross-site scripting 
D)  Java 
A)  SQL injection 
B)  HTML 
C)  Cross-site scripting 
D)  Java

Question 7

Why are passwords often considered the "Achilles' heel" of electronic systems?

Accepted Answer

A)  Password selection is left to the end user and cannot be fully controlled. 
B)  Systems cannot handle complex passwords. 
C)  Any password can be easily hacked. 
D)  No other control can better prevent fraud than the wise use of passwords. 
A)  Password selection is left to the end user and cannot be fully controlled. 
B)  Systems cannot handle complex passwords. 
C)  Any password can be easily hacked. 
D)  No other control can better prevent fraud than the wise use of passwords.

Question 8

Which of the following human features is generally used in biometrics?

Accepted Answer

A)  Height 
B)  Fingerprints 
C)  Complexion 
D)  Weight 
A)  Height 
B)  Fingerprints 
C)  Complexion 
D)  Weight

Question 9

What is the term that describes the act of trying to gain access to networks and secure information during a risk assessment?

Accepted Answer

A)  Troubleshooting 
B)  Intrusion detection 
C)  Encryption 
D)  Security audit 
A)  Troubleshooting 
B)  Intrusion detection 
C)  Encryption 
D)  Security audit

Question 10

Which of the following is described as the viewing of information that passes along a network line?

Accepted Answer

A)  Sniffing 
B)  Spoofing 
C)  Hijacking 
D)  Impersonation 
A)  Sniffing 
B)  Spoofing 
C)  Hijacking 
D)  Impersonation

Question 11

The threat of falsified identity is less of a concern in the case of:

Accepted Answer

A)  virtual private networks. 
B)  traditional EDI settings. 
C)  e-business. 
D)  unsecured online transactions. 
A)  virtual private networks. 
B)  traditional EDI settings. 
C)  e-business. 
D)  unsecured online transactions.

Question 12

What is biometrics?

Accepted Answer

A)  A vital part of the security of any electronic system 
B)  The use of unique features of the human body to create secure access controls 
C)  The most important aspect of internal control in an organization 
D)  An authorization that reassures users that transactions are valid 
A)  A vital part of the security of any electronic system 
B)  The use of unique features of the human body to create secure access controls 
C)  The most important aspect of internal control in an organization 
D)  An authorization that reassures users that transactions are valid

Question 13

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Accepted Answer

A)  Virtual private network 
B)  Public-key encryption 
C)  Cross-site scripting 
D)  SQL injection 
A)  Virtual private network 
B)  Public-key encryption 
C)  Cross-site scripting 
D)  SQL injection

Question 14

Passwords, biometrics, and digital signatures are examples of which of the following?

Accepted Answer

A)  Physical controls 
B)  Segregation of duties 
C)  Authorization controls 
D)  Checks on performance 
A)  Physical controls 
B)  Segregation of duties 
C)  Authorization controls 
D)  Checks on performance

Question 15

Which of the terms below best describes the act of employees using sophisticated denial-of-service attempts on local machines?

Accepted Answer

A)  Phishing 
B)  Sniffing 
C)  Vandalism 
D)  Wartrapping 
A)  Phishing 
B)  Sniffing 
C)  Vandalism 
D)  Wartrapping

Question 16

Which of the following installs monitoring software in addition to the regular software that a user downloads or buys?

Accepted Answer

A)  Internet worm 
B)  Bot 
C)  Middleware 
D)  Spyware 
A)  Internet worm 
B)  Bot 
C)  Middleware 
D)  Spyware

Question 17

What is spoofing?

Accepted Answer

A)  Using a subtly different Internet host name to mimic another business 
B)  Changing the information in e-mail headers or IP addresses 
C)  Extracting personal or corporate computer information from employees 
D)  Viewing the information that passes along a network line 
A)  Using a subtly different Internet host name to mimic another business 
B)  Changing the information in e-mail headers or IP addresses 
C)  Extracting personal or corporate computer information from employees 
D)  Viewing the information that passes along a network line

Question 18

What is the primary electronic transaction and document control used in e-commerce?

Accepted Answer

A)  Encryption 
B)  Spoofing 
C)  Physical control 
D)  Biometric control 
A)  Encryption 
B)  Spoofing 
C)  Physical control 
D)  Biometric control

Question 19

The most difficult aspect of detecting e-business fraud is:

Accepted Answer

A)  information about the transactions is captured in databases that are impossible to analyze. 
B)  correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C)  the lack of hard-copy documentation, the very essence of e-business. 
D)  using technology to catch technology fraud. 
A)  information about the transactions is captured in databases that are impossible to analyze. 
B)  correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C)  the lack of hard-copy documentation, the very essence of e-business. 
D)  using technology to catch technology fraud.

Question 20

The advantage of e-business transactions in detecting electronic fraud is:

Accepted Answer

A)  the use of encryption which protects confidential and sensitive information from being stolen. 
B)  that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C)  the absence of hard-copy documentation, the very essence of e-commerce. 
D)  that they not only make fraud easier to commit, but also make it much easier to detect. 
A)  the use of encryption which protects confidential and sensitive information from being stolen. 
B)  that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C)  the absence of hard-copy documentation, the very essence of e-commerce. 
D)  that they not only make fraud easier to commit, but also make it much easier to detect.

What is the most important aspect of internal control?

Which of the following activities would be the least practical for a fraud examiner?

Which of the following refers to the tactic of keeping security holes, encryption algorithms, and processes secret to confuse attackers?

In an electronic environment, no other control can better prevent fraud than the wise use of .

What is the term for a technique in which hackers go to known business traveler locations like airports and set up access points (which look like regular wireless networks) through their laptops to the Internet?

A hacker sends a database command after regular data in an online submission form. This command inserts an unauthorized record giving access to the hacker. Which risk is being discussed here?

Why are passwords often considered the "Achilles' heel" of electronic systems?

Which of the following human features is generally used in biometrics?

What is the term that describes the act of trying to gain access to networks and secure information during a risk assessment?

Which of the following is described as the viewing of information that passes along a network line?

The threat of falsified identity is less of a concern in the case of:

What is biometrics?

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Passwords, biometrics, and digital signatures are examples of which of the following?

Which of the terms below best describes the act of employees using sophisticated denial-of-service attempts on local machines?

Which of the following installs monitoring software in addition to the regular software that a user downloads or buys?

What is spoofing?

What is the primary electronic transaction and document control used in e-commerce?

The most difficult aspect of detecting e-business fraud is:

The advantage of e-business transactions in detecting electronic fraud is:

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

Legal Follow-Up

Filters

Exam 17: E-Commerce Fraud

What is the most important aspect of internal control?

Which of the following activities would be the least practical for a fraud examiner?

Which of the following refers to the tactic of keeping security holes, encryption algorithms, and processes secret to confuse attackers?

In an electronic environment, no other control can better prevent fraud than the wise use of .

What is the term for a technique in which hackers go to known business traveler locations like airports and set up access points (which look like regular wireless networks) through their laptops to the Internet?

A hacker sends a database command after regular data in an online submission form. This command inserts an unauthorized record giving access to the hacker. Which risk is being discussed here?

Why are passwords often considered the "Achilles' heel" of electronic systems?

Which of the following human features is generally used in biometrics?

What is the term that describes the act of trying to gain access to networks and secure information during a risk assessment?

Which of the following is described as the viewing of information that passes along a network line?

The threat of falsified identity is less of a concern in the case of:

What is biometrics?

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Passwords, biometrics, and digital signatures are examples of which of the following?

Which of the terms below best describes the act of employees using sophisticated denial-of-service attempts on local machines?

Which of the following installs monitoring software in addition to the regular software that a user downloads or buys?

What is spoofing?

What is the primary electronic transaction and document control used in e-commerce?

The most difficult aspect of detecting e-business fraud is:

The advantage of e-business transactions in detecting electronic fraud is:

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

Legal Follow-Up

Filters