Question 1

PCI-DSS is a standard established by which of the following?

Accepted Answer

A)  the banking industry
B)  the credit card industry
C)  the federal government
D)  the retail industryE) B) and C)
F) A) and B)

Question 2

Which of the following is not an example of a PUP?

Accepted Answer

A)  adware
B)  browser parasite
C)  drive-by download
D)  spywareE) A) and B)
F) A) and D)

Question 3

All of the following experienced high-profile data breaches in 2015 except:

Accepted Answer

A)  CVS.
B)  Walgreens.
C)  Amazon.
D)  Experian.E) A) and D)
F) C) and D)

Question 4

Which of the following is an example of an integrity violation of e-commerce security?

Accepted Answer

A)  A website is not actually operated by the entity the customer believes it to be.
B)  A merchant uses customer information in a manner not intended by the customer.
C)  A customer denies that he or she is the person who placed the order.
D)  An unauthorized person intercepts an online communication and changes its contents.E) A) and B)
F) B) and C)

Question 5

All of the following statements about Apple Pay are true except which of the following?

Accepted Answer

A)  Apple Pay is subject to recent regulations issued by the Bureau of Consumer Financial Protection applicable to GPR transactions.
B)  Apple Pay is based on Touch ID biometric fingerprint scanning.
C)  Apple Pay can be used for mobile payments at the point of sale at a physical store.
D)  Apple Pay relies on NFC chip technology.E) A) and C)
F) B) and D)

Question 6

The Data Encryption Standard uses a(n) ________-bit key.

Accepted Answer

A)  8
B)  56
C)  256
D)  512E) B) and D)
F) All of the above

Question 7

What is a sniffing attack and how does it differ from a MitM attack?

Accepted Answer

A sniffer is a type of eavesdropping pro...

Question 8

The overall rate of online credit card fraud is ________ of all online card transactions.

Accepted Answer

A)  less than 1%
B)  around 5%
C)  around 10%
D)  around 15%E) A) and B)
F) C) and D)

Question 9

The attack on Dyn,Twitter,Amazon,and other major organizations in October 2016,is an example of which of the following?

Accepted Answer

A)  SQL injection attack
B)  browser parasite
C)  DDoS attack
D)  MitM attackE) A) and C)
F) B) and C)

Question 10

Which of the following is a set of short-range wireless technologies used to share information among devices within about two inches of each other?

Accepted Answer

A)  DES
B)  NFC
C)  IM
D)  text messagingE) C) and D)
F) None of the above

Question 11

All of the following are limitations of the existing online credit card payment system except:

Accepted Answer

A)  poor security.
B)  cost to consumers.
C)  cost to merchant.
D)  social equity.E) None of the above
F) A) and D)

Question 12

Which of the following dimensions of e-commerce security does not involve encryption?

Accepted Answer

A)  confidentiality
B)  availability
C)  message integrity
D)  nonrepudiationE) A) and D)
F) None of the above

Question 13

Malware that comes with a downloaded file requested by a user is called a:

Accepted Answer

A)  Trojan horse.
B)  backdoor.
C)  drive-by download.
D)  PUP.E) All of the above
F) A) and C)

Question 14

The easiest and least expensive way to prevent threats to system integrity is to install anti-virus software.

Accepted Answer

A) True 
 B)False

Question 15

Apple Pay uses near field communication (NFC)chips.

Accepted Answer

A) True 
 B)False

Question 16

Confidentiality is sometimes confused with:

Accepted Answer

A)  privacy.
B)  authenticity.
C)  integrity.
D)  nonrepudiation.E) All of the above
F) A) and B)

Question 17

Shellshock is an example of which of the following?

Accepted Answer

A)  mobile malware
B)  software vulnerability
C)  botnet
D)  Trojan horseE) A) and D)
F) A) and C)

Question 18

Conficker is an example of a:

Accepted Answer

A)  virus.
B)  worm.
C)  Trojan horse.
D)  botnet.E) None of the above
F) All of the above

Question 19

Explain how an online credit card transaction works,identifying the parties involved and describing how SSL/TLS is involved.What are the limitations of online credit card payment systems?

Accepted Answer

The five parties involved in a credit ca...

Question 20

All of the following are prominent hacktivist groups except:

Accepted Answer

A)  Anonymous.
B)  LulzSec.
C)  Impact Team.
D)  Avid Life.E) A) and B)
F) B) and C)

Exam 5: E-Commerce Security and Payment Systems

The Data Encryption Standard uses a(n) ________-bit key.

Correct AnswerverifiedShow Answer

Which of the following dimensions of e-commerce security does not involve encryption?

Correct AnswerverifiedShow Answer

Conficker is an example of a:

Correct AnswerverifiedShow Answer

Explain how an online credit card transaction works,identifying the parties involved and describing how SSL/TLS is involved.What are the limitations of online credit card payment systems?

Correct AnswerverifiedThe five parties involved in a credit ca...View AnswerShow Answer

The overall rate of online credit card fraud is ________ of all online card transactions.

Correct AnswerverifiedShow Answer

Apple Pay uses near field communication (NFC)chips.

Correct AnswerverifiedShow Answer

All of the following experienced high-profile data breaches in 2015 except:

Correct AnswerverifiedShow Answer

Which of the following is not an example of a PUP?

Correct AnswerverifiedShow Answer

All of the following are limitations of the existing online credit card payment system except:

Correct AnswerverifiedShow Answer

Confidentiality is sometimes confused with:

Correct AnswerverifiedShow Answer

PCI-DSS is a standard established by which of the following?

Correct AnswerverifiedShow Answer

All of the following statements about Apple Pay are true except which of the following?

Correct AnswerverifiedShow Answer

All of the following are prominent hacktivist groups except:

Correct AnswerverifiedShow Answer

Malware that comes with a downloaded file requested by a user is called a:

Correct AnswerverifiedShow Answer

Shellshock is an example of which of the following?

Correct AnswerverifiedShow Answer

What is a sniffing attack and how does it differ from a MitM attack?

Correct AnswerverifiedA sniffer is a type of eavesdropping pro...View AnswerShow Answer

Which of the following is an example of an integrity violation of e-commerce security?

Correct AnswerverifiedShow Answer

The attack on Dyn,Twitter,Amazon,and other major organizations in October 2016,is an example of which of the following?

Correct AnswerverifiedShow Answer

The easiest and least expensive way to prevent threats to system integrity is to install anti-virus software.

Correct AnswerverifiedShow Answer

Which of the following is a set of short-range wireless technologies used to share information among devices within about two inches of each other?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
The five parties involved in a credit ca...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
A sniffer is a type of eavesdropping pro...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified