Question 1

What is the term that describes the act of trying to gain access to networks and secure information?

Accepted Answer

A) troubleshooting 
B) intrusion detection 
C) encryption 
D) security audit 
A) troubleshooting 
B) intrusion detection 
C) encryption 
D) security audit B

Question 2

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

Accepted Answer

A) social engineering 
B) spoofing 
C) data theft 
D) customer impersonation 
A) social engineering 
B) spoofing 
C) data theft 
D) customer impersonation A

Question 3

The most difficult aspect of detecting e-business fraud is:

Accepted Answer

A) information about the transactions is captured in databases that are impossible to analyze. 
B) correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C) the lack of hard-copy documentation, the very essence of e-business. 
D) to use technology to catch technology fraud. 
A) information about the transactions is captured in databases that are impossible to analyze. 
B) correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C) the lack of hard-copy documentation, the very essence of e-business. 
D) to use technology to catch technology fraud. B

Question 4

What is biometrics?

Accepted Answer

A) A vital part of the security of any electronic system. 
B) The use of unique features of the human body to create secure access controls. 
C) The most important aspect of internal control in an organization. 
D) An authorization that reassures users that transactions are valid. 
A) A vital part of the security of any electronic system. 
B) The use of unique features of the human body to create secure access controls. 
C) The most important aspect of internal control in an organization. 
D) An authorization that reassures users that transactions are valid.

Question 5

Which of the terms below best describe the act of employees using sophisticated denial-of-service attempts on local machines?

Accepted Answer

A) phishing 
B) sniffing 
C) vandalism 
D) wartrapping 
A) phishing 
B) sniffing 
C) vandalism 
D) wartrapping

Question 6

What is the term for a method of injecting Javascript and other browser commands into the Web site data.

Accepted Answer

A) Database query injection 
B) HTML 
C) Cross-site scripting 
D) Java 
A) Database query injection 
B) HTML 
C) Cross-site scripting 
D) Java

Question 7

Which of these is a program that claims to do something useful,but also contains hidden behavior?

Accepted Answer

A) A trojan horse 
B) A normal computer virus 
C) An adware 
D) An Internet worm 
A) A trojan horse 
B) A normal computer virus 
C) An adware 
D) An Internet worm

Question 8

​Which of the following e-commerce threats spreads via direct transfer or email?

Accepted Answer

A) ​internet worms 
B) ​a Trojan horse 
C) ​wartrapping 
D) ​phishing 
A) ​internet worms 
B) ​a Trojan horse 
C) ​wartrapping 
D) ​phishing

Question 9

What is spoofing?

Accepted Answer

A) Using a subtly different Internet host name to mimic another business. 
B) Changing the information in e-mail headers or IP addresses. 
C) Extracting personal or corporate computer information from employees. 
D) Viewing the information that passes along a network line. 
A) Using a subtly different Internet host name to mimic another business. 
B) Changing the information in e-mail headers or IP addresses. 
C) Extracting personal or corporate computer information from employees. 
D) Viewing the information that passes along a network line.

Question 10

A hacker sends a database command after regular data in an online submission form.This?command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

Accepted Answer

A) SQL injection 
B) HTML 
C) Cross-site scripting 
D) Java 
A) SQL injection 
B) HTML 
C) Cross-site scripting 
D) Java

Question 11

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Accepted Answer

A) Virtual private network 
B) Public-key encryption 
C) Cross-site scripting 
D) SQL injection 
A) Virtual private network 
B) Public-key encryption 
C) Cross-site scripting 
D) SQL injection

Question 12

Which of the following is the first step in looking for e-business fraud?​

Accepted Answer

A) ​Identify the frauds that can occur in the type of business being investigated. 
B) ​Determine the symptoms of e-business fraud within the business being investigated. 
C) ​Gain an understanding of the business being investigated. 
D) ​Investigate any anomalies observed within the business being investigated. 
A) ​Identify the frauds that can occur in the type of business being investigated. 
B) ​Determine the symptoms of e-business fraud within the business being investigated. 
C) ​Gain an understanding of the business being investigated. 
D) ​Investigate any anomalies observed within the business being investigated.

Question 13

Why are passwords often considered the "Achilles' heel" of electronic systems?

Accepted Answer

A) Password selection is left to the end user and cannot be fully controlled. 
B) Systems cannot handle complex passwords. 
C) Any password can be easily hacked. 
D) No other control can better prevent fraud than the wise use of passwords. 
A) Password selection is left to the end user and cannot be fully controlled. 
B) Systems cannot handle complex passwords. 
C) Any password can be easily hacked. 
D) No other control can better prevent fraud than the wise use of passwords.

Question 14

The threat of falsified identity is less of a concern in the case of:

Accepted Answer

A) virtual private networks. 
B) traditional EDI settings. 
C) e-business. 
D) unsecured online transactions. 
A) virtual private networks. 
B) traditional EDI settings. 
C) e-business. 
D) unsecured online transactions.

Question 15

What is a person who sends e-mail or pop-up messages to users asking for personal information in inventive ways called?

Accepted Answer

A) trojan 
B) sniffer 
C) spoofer 
D) phisher 
A) trojan 
B) sniffer 
C) spoofer 
D) phisher

Question 16

One of the greatest fallacies of e-commerce security is depending on which of the following?

Accepted Answer

A) risk-assessment 
B) security through obscurity 
C) digital signature 
D) biometrics 
A) risk-assessment 
B) security through obscurity 
C) digital signature 
D) biometrics

Question 17

Why is it that internet user information can be hijacked when they conduct web visits?

Accepted Answer

A) social engineering has made it easy to do so. 
B) many managers lack the technical expertise to prevent and detect data theft. 
C) data can be transferred easily and quickly to any location in the world. 
D) subtle differences in Internet host names often go unnoticed by Internet users. 
A) social engineering has made it easy to do so. 
B) many managers lack the technical expertise to prevent and detect data theft. 
C) data can be transferred easily and quickly to any location in the world. 
D) subtle differences in Internet host names often go unnoticed by Internet users.

Question 18

What is the primary electronic transaction and document control used in e-commerce?

Accepted Answer

A) Encryption 
B) Spoofing 
C) Physical control 
D) Biometric control 
A) Encryption 
B) Spoofing 
C) Physical control 
D) Biometric control

Question 19

Passwords,biometrics,and digital signatures are examples of which of the following?

Accepted Answer

A) physical controls 
B) segregation of duties 
C) authorization controls 
D) checks on performance 
A) physical controls 
B) segregation of duties 
C) authorization controls 
D) checks on performance

Question 20

The advantage of e-business transactions is:

Accepted Answer

A) the use of encryption which protects confidential and sensitive information from being stolen. 
B) that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C) the absence of hard-copy documentation, the very essence of e-commerce. 
D) that they not only make fraud easier to commit, but also make it much easier to detect. 
A) the use of encryption which protects confidential and sensitive information from being stolen. 
B) that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C) the absence of hard-copy documentation, the very essence of e-commerce. 
D) that they not only make fraud easier to commit, but also make it much easier to detect.

What is the term that describes the act of trying to gain access to networks and secure information?

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

The most difficult aspect of detecting e-business fraud is:

What is biometrics?

Which of the terms below best describe the act of employees using sophisticated denial-of-service attempts on local machines?

What is the term for a method of injecting Javascript and other browser commands into the Web site data.

Which of these is a program that claims to do something useful,but also contains hidden behavior?

Which of the following e-commerce threats spreads via direct transfer or email?

What is spoofing?

A hacker sends a database command after regular data in an online submission form.This?command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Which of the following is the first step in looking for e-business fraud?

Why are passwords often considered the "Achilles' heel" of electronic systems?

The threat of falsified identity is less of a concern in the case of:

What is a person who sends e-mail or pop-up messages to users asking for personal information in inventive ways called?

One of the greatest fallacies of e-commerce security is depending on which of the following?

Why is it that internet user information can be hijacked when they conduct web visits?

What is the primary electronic transaction and document control used in e-commerce?

Passwords,biometrics,and digital signatures are examples of which of the following?

The advantage of e-business transactions is:

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

Legal Follow-Up

Filters

Exam 17: E-Commerce Fraud

What is the term that describes the act of trying to gain access to networks and secure information?

What is the term for when a hacker calls a targeted user posing as technical support and asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account?

The most difficult aspect of detecting e-business fraud is:

What is biometrics?

Which of the terms below best describe the act of employees using sophisticated denial-of-service attempts on local machines?

What is the term for a method of injecting Javascript and other browser commands into the Web site data.

Which of these is a program that claims to do something useful,but also contains hidden behavior?

​Which of the following e-commerce threats spreads via direct transfer or email?

What is spoofing?

A hacker sends a database command after regular data in an online submission form.This?command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

What allows information to be sent in encoded format over unsecured networks like the Internet and is widely used to protect data and ensure privacy?

Which of the following is the first step in looking for e-business fraud?​

Why are passwords often considered the "Achilles' heel" of electronic systems?

The threat of falsified identity is less of a concern in the case of:

What is a person who sends e-mail or pop-up messages to users asking for personal information in inventive ways called?

One of the greatest fallacies of e-commerce security is depending on which of the following?

Why is it that internet user information can be hijacked when they conduct web visits?

What is the primary electronic transaction and document control used in e-commerce?

Passwords,biometrics,and digital signatures are examples of which of the following?

The advantage of e-business transactions is:

The Nature of Fraud

Who Commits Fraud and Why

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability, asset, and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

Legal Follow-Up

Filters

Which of the following e-commerce threats spreads via direct transfer or email?

Which of the following is the first step in looking for e-business fraud?