Quiz 2 Study Guide

1. In order from beginning to end, the major steps in the SDLC, are:
A) systems analysis/planning; systems design; building the system; testing; and implementation.
B) systems design; testing; building the system; and implementation.
C) systems analysis/planning; systems design; building the system; implementation; and testing.
D) systems analysis/planning; implementation; building the system; and testing.

2. Which of the following basic system functionalities is used to display goods on a Web site?
A) product database
B) digital catalog
C) shopping cart system
D) customer database system

3. Which of the following systems is required to understand the marketing effectiveness of your e-commerce site?
A) shopping cart
B) product database
C) site tracking and reporting system
D) inventory management system

4. Which of the following might include a data flow diagram to describe the flow of information for a Web site?
A) physical design
B) logical design
C) testing plan
D) co-location plan

5. The leading Web server software is:
A) Apache.
B) Microsoft Internet Information Server.
C) Sun.
D) Zeus.

6. Which of the following is used to process certificates and private/public key information?
A) HTTP
B) SSL
C) FTP
D) data capture tools
7. Which of the following cannot be used to retrieve objects from a database?
A) CGI
B) ASP
C) JSP
D) HTML

8. Which of the following types of servers monitors and controls access to a main Web server and implements firewall protection?
A) proxy server
B) list server
C) groupware server
D) mail server

9. Which of the following types of servers creates an environment for online real-time text and audio interactions with customers?
A) list server
B) groupware server
C) proxy server
D) chat server

10. Which of the following is not a type of application server?
A) proxy server
B) mail server
C) ad server
D) FTP server

11. All of the following are basic functionality provided by e-commerce merchant server software except:
A) a product catalog.
B) marketing software
C) a shopping cart.
D) credit card processing.

12. A template that allows you to build an online store, such as that offered by Bigstep.com, is most appropriate for a:
A) medium-sized business with a wide variety of products.
B) small business with a relatively small variety of products.
C) large multinational business.
D) none of the above.

13. Which of the following is not an open source software tool?
A) WebSphere
B) Apache
C) MySQL
D) PHP

14. Which of the following types of sites typically needs a high percent of secure pages?
A) web services
B) customer self-service
C) trading
D) publishing/subscription

15. The number of hits per second that a Web site can handle depends on:
A) the number of simultaneous users.
B) the number of network connections the Web site has to the Internet.
C) the bandwidth between the Web site's server and the Internet.
D) the speed of the Web server's processors.

16. The higher the bandwidth available to a Web site:
A) the more visitors can simultaneously access the site.
B) the fewer visitors can simultaneously access the site.
C) the faster the server can process a request.
D) the more degradation the site may experience.

17. Web servers are most efficient at:
A) serving static Web pages.
B) accessing a database.
C) downloading audio and video files.
D) generating dynamic page content.

18. All of the following are important factors in successful e-commerce Web site design except:
A) redundant navigation.
B) legible text.
C) ease of use.
D) extensive animation.

19. ________ is a set of standards for communicating between a browser and a program running on a server that allows for interaction between the user and server.
A) CGI
B) ColdFusion
C) JavaScript
D) VBScript

20. ________ is a programming language invented by Netscape used to control the objects on an HTML page and handle interactions with the browser.
A) VBScript
B) ActiveX
C) ColdFusion
D) JavaScript

21. The primary way a Web site is able to personalize the content presented to a visitor is through the use of:
A) privacy policies.
B) cookies.
C) accessibility rules.
D) site management tools.

22. Most complaints to the Internet Crime Complaint Center in 2007 involved:
A) online credit card fraud.
B) online auction fraud.
C) computer viruses.
D) denial of service attacks.

23. What is the most common type of attack against computer systems?
A) insider abuse of Internet access
B) denial of service
C) financial fraud
D) Web site defacement

24. The overall rate of online credit card fraud is about ________ percent of all online card transactions.
A) 1.7
B) 3.7
C) 5.7
D) 7.7

25. The six key dimensions to e-commerce security are: nonrepudiation, authenticity, availability, integrity, privacy, and:
A) confidentiality.
B) usability.
C) functionality.
D) viability.

26. ________ refers to the ability to ensure that e-commerce participants do not deny their online actions.
A) Nonrepudiation
B) Authenticity
C) Availability
D) Integrity

27. Which of the following is an example of an integrity violation of e-commerce security?
A) A Web site is not actually operated by the entity the customer believes it to be.
B) A merchant uses customer information in a manner not intended by the customer.
C) A customer denies that he or she is the person who placed the order.
D) An unauthorized person intercepts an online communication and changes its contents.

28. ________ refers to the ability to identify the person or entity with whom you are dealing on the Internet.
A) Nonrepudiation
B) Authenticity
C) Availability
D) Integrity

29. ________ refers to the ability to ensure that an e-commerce site continues to function as intended.
A) Nonrepudiation
B) Authenticity
C) Availability
D) Integrity

30. All of the following are file types likely to be infected by a macro virus except:
A) .exe.
B) .doc.
C) .xls.
D) .ppt.

31. The Slammer worm targeted a known vulnerability in:
A) Microsoft Word.
B) Microsoft Outlook Express.
C) Microsoft SQL Server database software.
D) Microsoft Access database software.

32. Software that is used to obtain private user information such as user's keystrokes or copies of e-mail is referred to as:
A) spyware.
B) browser parasites.
C) Trojan horses.
D) adware.

33. Which dimension(s) of security is(are) spoofing a threat to?
A) integrity
B) availability
C) integrity and authenticity
D) availability and integrity

34. All of the following are examples of malicious code except:
A) viruses.
B) bots.
C) worms.
D) sniffers.

35. Symmetric key encryption is also known as:
A) public key encryption.
B) secret key encryption.
C) PGP.
D) PKI.

36. All the following statements about symmetric key encryption are true except:
A) in symmetric key encryption, both the sender and the receiver use the same key to encrypt and decrypt a message.
B) the Data Encryption Standard is a symmetric key encryption system.
C) symmetric key encryption is computationally slower.
D) symmetric key encryption is a key element in digital envelopes.

37. If you used a symmetric key encryption for large documents, with public key encryption to encrypt and send the symmetric key, you would be using a digital:
A) envelope.
B) signature.
C) certificate.
D) hash.

38. All of the following statements about PKI are true except:
A) the term PKI refers to the certification authorities and digital certificate procedures that are accepted by all parties.
B) PKI is not effective against insiders who have a legitimate access to corporate systems including customer information.
C) PKI guarantees that the verifying computer of the merchant is secure.
D) the acronym PKI stands for public key infrastructure.

39. All of the following are methods of securing channels of communication except:
A) SSL.
B) S-HTTP.
C) VPN.
D) FTP.

40. A ________ is hardware or software that acts as a filter to prevent unwanted packets from entering a network.
A) firewall
B) virtual private network
C) proxy server
D) PPTP

41. All of the following are used for authentication except:
A) digital signatures.
B) certificates of authority.
C) biometric devices.
D) packet filters.

42. What is the first step in developing an e-commerce security plan?
A) Create a security organization.
B) Develop a security policy.
C) Perform a risk assessment.
D) Perform a security audit.

43. All of the following statements about debit cards are true except:
A) debit cards eliminate the need for consumers to write a paper check when making a purchase.
B) debit cards enable consumers to make purchases even if they do not have sufficient funds at the time of purchase.
C) debit cards do not provide any float.
D) debit cards do not have the protections provided by Regulation Z to credit cards.

44. All of the following are examples of stored value payment systems except:
A) smart cards.
B) American Express accounts.
C) gift certificates.
D) prepaid cards.

45. None of the following payment systems offers immediate monetary value except:
A) personal checks.
B) credit cards.
C) stored value/debit card.
D) accumulating balance.

46. PayPal Mobile incorporates what technology to request electronic payments?
A) RFID
B) NFC chips
C) IM
D) text messaging

47. All of the following payment systems provide some security against unauthorized use except:
A) personal checks.
B) debit cards.
C) cash.
D) accumulating balance.

48. Which of the following is best suited for processing micropayments?
A) digital cash
B) digital accumulating balance payment system
C) digital checking payment system
D) digital credit card system

49. ________ is a private organization that monitors and tracks online criminal activity reported to it by private corporations and government agencies.
A) US-CERT
B) The CERT Coordination Center
C) VeriSign
D) The IC3

50. Which system functionality must be implemented for your Web site to be able to personalize or customize a product for a client?
A) an ad server
B) a site tracking and reporting system
C) an inventory management system
D) customer on-site tracking