Question 1

The threat of falsified identity is less of a concern in the case of:

Accepted Answer

A) virtual private networks. 
B) traditional EDI settings. 
C) e-business. 
D) unsecured online transactions. 
A) virtual private networks. 
B) traditional EDI settings. 
C) e-business. 
D) unsecured online transactions. B

Question 2

Which element of the fraud triangle can easily be reduced in preventing fraud in e-business?

Accepted Answer

A) Pressure 
B) Opportunity 
C) Rationalization 
D) Interaction 
A) Pressure 
B) Opportunity 
C) Rationalization 
D) Interaction B

Question 3

E-mail messages and Web visits can be hijacked because:

Accepted Answer

A) social engineering has made it easy to do so. 
B) many managers lack the technical expertise to prevent and detect data theft. 
C) data can be transferred easily and quickly to any location in the world. 
D) subtle differences in Internet host names often go unnoticed by Internet users. 
A) social engineering has made it easy to do so. 
B) many managers lack the technical expertise to prevent and detect data theft. 
C) data can be transferred easily and quickly to any location in the world. 
D) subtle differences in Internet host names often go unnoticed by Internet users. D

Question 4

Firms specializing in ______ try to gain access to networks and secure information,and they report their findings directly to management.

Accepted Answer

A) troubleshooting 
B) intrusion detection 
C) encryption 
D) security audit 
A) troubleshooting 
B) intrusion detection 
C) encryption 
D) security audit

Question 5

Which of the following is NOT a general type of control activity?

Accepted Answer

A) Adequate separation of duties 
B) Independent checks on performance 
C) Proper authorization of transactions and activities 
D) Use of internal auditors 
A) Adequate separation of duties 
B) Independent checks on performance 
C) Proper authorization of transactions and activities 
D) Use of internal auditors

Question 6

What is spoofing?

Accepted Answer

A) Using a subtly different Internet host name to mimic another business. 
B) Changing the information in e-mail headers or IP addresses. 
C) Extracting personal or corporate information from employees. 
D) Viewing the information that passes along a network line. 
A) Using a subtly different Internet host name to mimic another business. 
B) Changing the information in e-mail headers or IP addresses. 
C) Extracting personal or corporate information from employees. 
D) Viewing the information that passes along a network line.

Question 7

The most difficult aspect of detecting e-business fraud is:

Accepted Answer

A) information about the transactions is captured in databases that are impossible to analyze. 
B) correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C) the lack of hard-copy documentation,the very essence of e-business. 
D) to use technology to catch technology fraud. 
A) information about the transactions is captured in databases that are impossible to analyze. 
B) correctly specifying the types of frauds that can occur and the symptoms they will generate. 
C) the lack of hard-copy documentation,the very essence of e-business. 
D) to use technology to catch technology fraud.

Question 8

A technique in which hackers go to known business traveler locations like airports and set up access points (look like regular wireless networks)through their laptops to the Internet is called _____.

Accepted Answer

A) social engineering 
B) spoofing 
C) phishing 
D) wartrapping 
A) social engineering 
B) spoofing 
C) phishing 
D) wartrapping

Question 9

In an electronic environment,no other control can better prevent fraud than the wise use of _________.

Accepted Answer

A) digital certificates 
B) biometrics 
C) anti-virus software 
D) passwords 
A) digital certificates 
B) biometrics 
C) anti-virus software 
D) passwords

Question 10

A hacker sends a database command after regular data in an online submission form.This command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

Accepted Answer

A) SQL injection 
B) HTML 
C) Cross-site scripting 
D) Java 
A) SQL injection 
B) HTML 
C) Cross-site scripting 
D) Java

Question 11

Which of these is a program that claims to do something useful,but also contains hidden behavior?

Accepted Answer

A) A trojan horse 
B) A normal computer virus 
C) An adware 
D) An Internet worm 
A) A trojan horse 
B) A normal computer virus 
C) An adware 
D) An Internet worm

Question 12

________ is the use of unique features of the human body to create secure access controls.

Accepted Answer

A) Digital Signatures 
B) Passwords 
C) Biometrics 
D) Firewalls 
A) Digital Signatures 
B) Passwords 
C) Biometrics 
D) Firewalls

Question 13

A (n)_____,similar to a trojan horse,installs monitoring software in addition to the regular software that a user downloads or buys.

Accepted Answer

A) Internet worm 
B) Bot 
C) Middleware 
D) Spyware 
A) Internet worm 
B) Bot 
C) Middleware 
D) Spyware

Question 14

Why are passwords often considered the "Achilles' heel" of electronic systems?

Accepted Answer

A) Password selection is left to the end user and cannot be fully controlled. 
B) Systems cannot handle complex passwords. 
C) Any password can be easily hacked. 
D) No other control can better prevent fraud than the wise use of passwords. 
A) Password selection is left to the end user and cannot be fully controlled. 
B) Systems cannot handle complex passwords. 
C) Any password can be easily hacked. 
D) No other control can better prevent fraud than the wise use of passwords.

Question 15

A hacker calls a targeted user and pose as technical support.The hacker asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account.What is this an example of?

Accepted Answer

A) social engineering 
B) spoofing 
C) data theft 
D) customer impersonation 
A) social engineering 
B) spoofing 
C) data theft 
D) customer impersonation

Question 16

What is usually the primary goal in traditional fraud?

Accepted Answer

A) Financial statement fraud 
B) Identity theft 
C) Theft of money 
D) Information theft 
A) Financial statement fraud 
B) Identity theft 
C) Theft of money 
D) Information theft

Question 17

The advantage of e-business transactions is:

Accepted Answer

A) the use of encryption which protects confidential and sensitive information from being stolen. 
B) that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C) the absence of hard-copy documentation,the very essence of e-commerce. 
D) that they not only make fraud easier to commit,but also make it much easier to detect. 
A) the use of encryption which protects confidential and sensitive information from being stolen. 
B) that information about the transactions is captured in databases that can be analyzed in numerous ways. 
C) the absence of hard-copy documentation,the very essence of e-commerce. 
D) that they not only make fraud easier to commit,but also make it much easier to detect.

Question 18

A person who sends e-mail or pop-up messages to users asking for personal information in inventive ways is called a _________.

Accepted Answer

A) trojan 
B) sniffer 
C) spoofer 
D) phisher 
A) trojan 
B) sniffer 
C) spoofer 
D) phisher

Question 19

What is the most important aspect of internal control?

Accepted Answer

A) Audit committee 
B) Control policies 
C) Control system 
D) Personnel 
A) Audit committee 
B) Control policies 
C) Control system 
D) Personnel

Question 20

Which of the following examples illustrates sniffing?

Accepted Answer

A) A fraudster impersonating a customer and buying equipment on the customer's account. 
B) A fraudster viewing design data of a special project that is being transferred over a network. 
C) A fraudster using another employee's passwords to access sensitive information. 
D) An Internet site mimicking another site by using .org instead of .com. 
A) A fraudster impersonating a customer and buying equipment on the customer's account. 
B) A fraudster viewing design data of a special project that is being transferred over a network. 
C) A fraudster using another employee's passwords to access sensitive information. 
D) An Internet site mimicking another site by using .org instead of .com.

The threat of falsified identity is less of a concern in the case of:

Which element of the fraud triangle can easily be reduced in preventing fraud in e-business?

E-mail messages and Web visits can be hijacked because:

Firms specializing in ______ try to gain access to networks and secure information,and they report their findings directly to management.

Which of the following is NOT a general type of control activity?

What is spoofing?

The most difficult aspect of detecting e-business fraud is:

A technique in which hackers go to known business traveler locations like airports and set up access points (look like regular wireless networks)through their laptops to the Internet is called _____.

In an electronic environment,no other control can better prevent fraud than the wise use of _________.

A hacker sends a database command after regular data in an online submission form.This command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

Which of these is a program that claims to do something useful,but also contains hidden behavior?

________ is the use of unique features of the human body to create secure access controls.

A (n)_____,similar to a trojan horse,installs monitoring software in addition to the regular software that a user downloads or buys.

Why are passwords often considered the "Achilles' heel" of electronic systems?

A hacker calls a targeted user and pose as technical support.The hacker asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account.What is this an example of?

What is usually the primary goal in traditional fraud?

The advantage of e-business transactions is:

A person who sends e-mail or pop-up messages to users asking for personal information in inventive ways is called a _________.

What is the most important aspect of internal control?

Which of the following examples illustrates sniffing?

The Nature of Fraud

Why People Commit Fraud

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability,asset,and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

Legal Follow-Up

Filters

Exam 17: Fraud in E-Commerce

The threat of falsified identity is less of a concern in the case of:

Which element of the fraud triangle can easily be reduced in preventing fraud in e-business?

E-mail messages and Web visits can be hijacked because:

Firms specializing in ______ try to gain access to networks and secure information,and they report their findings directly to management.

Which of the following is NOT a general type of control activity?

What is spoofing?

The most difficult aspect of detecting e-business fraud is:

A technique in which hackers go to known business traveler locations like airports and set up access points (look like regular wireless networks)through their laptops to the Internet is called _____.

In an electronic environment,no other control can better prevent fraud than the wise use of _________.

A hacker sends a database command after regular data in an online submission form.This command inserts an unauthorized record giving access to the hacker.Which risk is being discussed here?

Which of these is a program that claims to do something useful,but also contains hidden behavior?

________ is the use of unique features of the human body to create secure access controls.

A (n)_____,similar to a trojan horse,installs monitoring software in addition to the regular software that a user downloads or buys.

Why are passwords often considered the "Achilles' heel" of electronic systems?

A hacker calls a targeted user and pose as technical support.The hacker asks the victim to divulge the account information so that immediate steps can be taken to prevent data loss from the account.What is this an example of?

What is usually the primary goal in traditional fraud?

The advantage of e-business transactions is:

A person who sends e-mail or pop-up messages to users asking for personal information in inventive ways is called a _________.

What is the most important aspect of internal control?

Which of the following examples illustrates sniffing?

The Nature of Fraud

Why People Commit Fraud

Fighting Fraud: an Overview

Preventing Fraud

Recognizing the Symptoms of Fraud

Data-Driven Fraud Detection

Investigating Theft Acts

Investigating Concealment

Conversion Investigation Methods

Inquiry Methods and Fraud Reports

Financial Statement Fraud

Revenue- and Inventory-Related Financial Statement Frauds

Liability,asset,and Inadequate Disclosure Frauds

Fraud Against Organizations

Consumer Fraud

Bankruptcy, divorce, and Tax Fraud

Legal Follow-Up

Filters