Question 1

Which of the following can be defined as the use of unique features of the human body to create secure access controls?

Accepted Answer

A)  Digital signatures 
B)  Passwords 
C)  Biometrics 
D)  Firewalls 
A)  Digital signatures 
B)  Passwords 
C)  Biometrics 
D)  Firewalls

Question 2

Which of these is a program that claims to do something useful, but also contains hidden behavior?

Accepted Answer

A)  A Trojan horse 
B)  A normal computer virus 
C)  Adware 
D)  An Internet worm 
A)  A Trojan horse 
B)  A normal computer virus 
C)  Adware 
D)  An Internet worm

Question 3

Why is it that Internet users' information can be hijacked when they conduct web visits?

Accepted Answer

A)  Social engineering has made it easy to do so. 
B)  Many managers lack the technical expertise to prevent and detect data theft. 
C)  Data can be transferred easily and quickly to any location in the world. 
D)  Subtle differences in Internet host names often go unnoticed by Internet users. 
A)  Social engineering has made it easy to do so. 
B)  Many managers lack the technical expertise to prevent and detect data theft. 
C)  Data can be transferred easily and quickly to any location in the world. 
D)  Subtle differences in Internet host names often go unnoticed by Internet users.

Question 4

Which of the following is NOT a general type of control activity?

Accepted Answer

A)  Adequate separation of duties 
B)  Independent checks on performance 
C)  Proper authorization of transactions and activities 
D)  Use of internal auditors 
A)  Adequate separation of duties 
B)  Independent checks on performance 
C)  Proper authorization of transactions and activities 
D)  Use of internal auditors

Question 5

Which of the following is the first step in looking for e-business fraud?

Accepted Answer

A)  Identify the frauds that can occur in the type of business being investigated 
B)  Determine the symptoms of e-business fraud within the business being investigated 
C)  Gain an understanding of the business being investigated 
D)  Investigate any anomalies observed within the business being investigated 
A)  Identify the frauds that can occur in the type of business being investigated 
B)  Determine the symptoms of e-business fraud within the business being investigated 
C)  Gain an understanding of the business being investigated 
D)  Investigate any anomalies observed within the business being investigated

Question 6

Generally, the best way to prevent fraud in e-business settings is to focus on:

Accepted Answer

A)  reducing pressures. 
B)  buying and implementing anti-virus software. 
C)  reducing fraud opportunities. 
D)  hiring security experts. 
A)  reducing pressures. 
B)  buying and implementing anti-virus software. 
C)  reducing fraud opportunities. 
D)  hiring security experts.

Question 7

Which of the following is the last step taken by fraud examiners during an examination of a business when looking for e-business fraud?

Accepted Answer

A)  Investigate all symptoms of e-fraud found 
B)  Use information systems to highlight possible fraud activity 
C)  Analyze the results of database searches 
D)  Determine if the activity noted is an anomaly or usual business activity 
A)  Investigate all symptoms of e-fraud found 
B)  Use information systems to highlight possible fraud activity 
C)  Analyze the results of database searches 
D)  Determine if the activity noted is an anomaly or usual business activity

Question 8

A hacker sends an e-mail impersonating technical support to two hundred employees of a company. Four employees respond with their password, thereby allowing the hacker to access the company's internal networks. Which technique is being discussed here?

Accepted Answer

A)  Sniffing 
B)  Crawling 
C)  Phishing 
D)  Wartrapping 
A)  Sniffing 
B)  Crawling 
C)  Phishing 
D)  Wartrapping

Question 9

Which of the following is NOT a means of using technology to spot technology fraud?

Accepted Answer

A)  Routinely search databases for symptoms 
B)  Utilize intrusion detection programs 
C)  Secure company systems 
D)  Train employees to recognize probable fraud 
A)  Routinely search databases for symptoms 
B)  Utilize intrusion detection programs 
C)  Secure company systems 
D)  Train employees to recognize probable fraud

Question 10

Which of the following is NOT an act of vandalism?

Accepted Answer

A)  Deleting a customer data file 
B)  Pouring hot coffee on a company keyboard 
C)  Stealing company data lists 
D)  Throwing a computer monitor 
A)  Deleting a customer data file 
B)  Pouring hot coffee on a company keyboard 
C)  Stealing company data lists 
D)  Throwing a computer monitor

Question 11

Which of the following are self-contained programs that represent one of the biggest threats in e-commerce fraud?

Accepted Answer

A)  P2P programs 
B)  Internet worms 
C)  Trojan horses 
D)  Spyware 
A)  P2P programs 
B)  Internet worms 
C)  Trojan horses 
D)  Spyware

Question 12

Which of the following examples illustrates sniffing?

Accepted Answer

A)  A fraudster impersonating a customer and buying equipment on the customer's account 
B)  A fraudster viewing design data of a special project that is being transferred over a network 
C)  A fraudster using another employee's passwords to access sensitive information 
D)  An Internet site mimicking another site by using .org instead of .com 
A)  A fraudster impersonating a customer and buying equipment on the customer's account 
B)  A fraudster viewing design data of a special project that is being transferred over a network 
C)  A fraudster using another employee's passwords to access sensitive information 
D)  An Internet site mimicking another site by using .org instead of .com

Question 13

An IDS is used to:

Accepted Answer

A)  Write computer scripts 
B)  Gain access to large networks 
C)  Monitor logs and detect potential break-ins 
D)  Troubleshoot networks 
A)  Write computer scripts 
B)  Gain access to large networks 
C)  Monitor logs and detect potential break-ins 
D)  Troubleshoot networks

Question 14

What is the term for a method of injecting Javascript and other browser commands into the Web site data?

Accepted Answer

A)  Database query injection 
B)  HTML 
C)  Cross-site scripting 
D)  Java 
A)  Database query injection 
B)  HTML 
C)  Cross-site scripting 
D)  Java

Question 15

Which of the following e-commerce threats spreads via direct transfer or e-mail?

Accepted Answer

A)  Internet worms 
B)  Trojan horse 
C)  Wartrapping 
D)  Phishing 
A)  Internet worms 
B)  Trojan horse 
C)  Wartrapping 
D)  Phishing

Question 16

What is normally the primary goal of fraud in an electronic environment?

Accepted Answer

A)  Financial statement fraud 
B)  Data theft 
C)  Theft of money 
D)  Asset misappropriation 
A)  Financial statement fraud 
B)  Data theft 
C)  Theft of money 
D)  Asset misappropriation

Question 17

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

Accepted Answer

A)  Social engineering 
B)  Spoofing 
C)  Data theft 
D)  Customer impersonation 
A)  Social engineering 
B)  Spoofing 
C)  Data theft 
D)  Customer impersonation

Which of the following can be defined as the use of unique features of the human body to create secure access controls?

Which of these is a program that claims to do something useful, but also contains hidden behavior?

Why is it that Internet users' information can be hijacked when they conduct web visits?

Which of the following is NOT a general type of control activity?

Which of the following is the first step in looking for e-business fraud?

Generally, the best way to prevent fraud in e-business settings is to focus on:

Which of the following is the last step taken by fraud examiners during an examination of a business when looking for e-business fraud?

A hacker sends an e-mail impersonating technical support to two hundred employees of a company. Four employees respond with their password, thereby allowing the hacker to access the company's internal networks. Which technique is being discussed here?

Which of the following is NOT a means of using technology to spot technology fraud?

Which of the following is NOT an act of vandalism?

Which of the following are self-contained programs that represent one of the biggest threats in e-commerce fraud?

Which of the following examples illustrates sniffing?

An IDS is used to:

What is the term for a method of injecting Javascript and other browser commands into the Web site data?

Which of the following e-commerce threats spreads via direct transfer or e-mail?

What is normally the primary goal of fraud in an electronic environment?

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

Legal Follow-Up

Filters

Exam 17: E-Commerce Fraud

Which of the following can be defined as the use of unique features of the human body to create secure access controls?

Which of these is a program that claims to do something useful, but also contains hidden behavior?

Why is it that Internet users' information can be hijacked when they conduct web visits?

Which of the following is NOT a general type of control activity?

Which of the following is the first step in looking for e-business fraud?

Generally, the best way to prevent fraud in e-business settings is to focus on:

Which of the following is the last step taken by fraud examiners during an examination of a business when looking for e-business fraud?

A hacker sends an e-mail impersonating technical support to two hundred employees of a company. Four employees respond with their password, thereby allowing the hacker to access the company's internal networks. Which technique is being discussed here?

Which of the following is NOT a means of using technology to spot technology fraud?

Which of the following is NOT an act of vandalism?

Which of the following are self-contained programs that represent one of the biggest threats in e-commerce fraud?

Which of the following examples illustrates sniffing?

An IDS is used to:

What is the term for a method of injecting Javascript and other browser commands into the Web site data?

Which of the following e-commerce threats spreads via direct transfer or e-mail?

What is normally the primary goal of fraud in an electronic environment?

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, Asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, Divorce, and Tax Fraud

Legal Follow-Up

Filters