Question 1

All of the following are methods of securing channels of communication except:
A) SSL/TLS.
B) digital certificates.
C) VPN.
D) FTP.

Accepted Answer

FTP is a file transfer protocol and not a method of securing channels of communication. SSL/TLS, digital certificates, and VPN are all methods of securing communication channels by encrypting the data being transmitted or establishing secure connections.

Question 2

All the following statements about symmetric key cryptography are true except:
A) in symmetric key cryptography, both the sender and the receiver use the same key to encrypt and decrypt a message.
B) the Data Encryption Standard is a symmetric key encryption system.
C) symmetric key cryptography is computationally slower.
D) symmetric key cryptography is a key element in digital envelopes.

Accepted Answer

Symmetric key cryptography is known for its speed and efficiency as it uses the same key for encryption and decryption, making it faster than asymmetric key cryptography. Therefore, statement C is false as it contradicts this fact.

Question 3

Proxy servers are also known as:
A) firewalls.
B) application gateways.
C) dual home systems.
D) packet filters.

Accepted Answer

The answer of Proxy servers are also known as:
A) firewalls.
B)...

Question 4

Next generation firewalls provide all of the following except:
A) an application-centric approach to firewall control.
B) the ability to identify applications regardless of the port, protocol, or security evasion tools used.
C) the ability to automatically update applications with security patches.
D) the ability to identify users regardless of the device or IP address.

Accepted Answer

Next generation firewalls are capable of providing an application-centric approach to firewall control, identifying applications regardless of the port, protocol, or security evasion tools used, and identifying users regardless of the device or IP address. However, the ability to automatically update applications with security patches is not a typical feature of next generation firewalls.

Question 5

Which of the following statements is not true?
A) A VPN provides both confidentiality and integrity.
B) A VPN uses both authentication and encryption.
C) A VPN uses a dedicated secure line.
D) The primary use of VPNs is to establish secure communications among business partners.

Accepted Answer

A VPN does not necessarily use a dedicated secure line. It can use the public internet as long as the communication is encrypted and secure. The other statements are true. A VPN provides both confidentiality and integrity through encryption and authentication, and its primary use is to establish secure communications among business partners.

Question 6

Which of the following dimensions of e-commerce security is not provided for by encryption?
A) confidentiality
B) availability
C) message integrity
D) nonrepudiation

Accepted Answer

Encryption provides confidentiality, message integrity, and nonrepudiation. However, availability is not directly provided by encryption. Availability refers to ensuring that the e-commerce system and its resources are accessible and functional for authorized users at all times. This is typically addressed through other security measures such as redundancy, load balancing, and disaster recovery planning.

Question 7

A ________ is hardware or software that acts as a filter to prevent unwanted packets from entering a network.
A) firewall
B) virtual private network
C) proxy server
D) PPTP

Accepted Answer

A firewall is specifically designed to prevent unwanted packets from entering a network. A virtual private network (VPN) allows users to securely access a network remotely, but does not necessarily act as a filter. A proxy server may filter traffic, but it can also be used for caching and forwarding purposes. PPTP (Point-to-Point Tunneling Protocol) is a method used for secure communication over a VPN, but it is not a hardware or software filter for unwanted packets.

Question 8

The Data Encryption Standard uses a(n) ________-bit key.
A) 8
B) 56
C) 256
D) 512

Accepted Answer

The Data Encryption Standard (DES) uses a 56-bit key. Option A is too short for adequate security, while options C and D are too long and not used by DES.

Question 9

A digital certificate contains all of the following except the:
A) subject's private key.
B) subject's public key.
C) digital signature of the certification authority.
D) digital certificate serial number.

Accepted Answer

A digital certificate does not contain the subject's private key. The private key is kept confidential and is never included in the certificate as it would compromise the security of the system.

Question 10

All of the following are features of WPA3 except:
A) it implements a more robust key exchange protocol.
B) it enables the creation of a VPN.
C) it provides a more secure way to connect IoT devices.
D) it features expanded encryption for public networks.

Accepted Answer

WPA3 does not enable the creation of a VPN. It focuses on improving key exchange, providing enhanced security for IoT devices, and expanding encryption for public networks.

Question 11

Discuss and explain the various types of malicious code and how they work. Include the different types of viruses.

Accepted Answer

The answer of Discuss and explain the various types of...

Question 12

All of the following statements about public key cryptography are true except:
A) public key cryptography uses two mathematically related digital keys.
B) public key cryptography ensures authentication of the sender.
C) public key cryptography does not ensure message integrity.
D) public key cryptography is based on the idea of irreversible mathematical functions.

Accepted Answer

The answer of All of the following statements about public...

Question 13

Asymmetric key cryptography is also known as:
A) public key cryptography.
B) secret key cryptography.
C) PGP.
D) PKI.

Accepted Answer

Asymmetric key cryptography is also commonly known as public key cryptography, where a public key is used for encryption and a private key is used for decryption. Secret key cryptography (B) uses the same key for both encryption and decryption, while PGP (C) stands for Pretty Good Privacy and is a specific software application that uses asymmetric key cryptography. PKI (D) stands for Public Key Infrastructure and is a system used to manage and distribute public keys in a secure manner.

Question 14

What is a sniffing attack and how does it differ from a MitM attack?

Accepted Answer

The answer of What is a sniffing attack and how...

Question 15

All of the following statements about PKI are true except:
A) the term PKI refers to the certification authorities and digital certificate procedures that are accepted by all parties.
B) PKI is not effective against insiders who have a legitimate access to corporate systems including customer information.
C) PKI guarantees that the verifying computer of the merchant is secure.
D) the acronym PKI stands for public key infrastructure.

Accepted Answer

PKI does not guarantee that the verifying computer of the merchant is secure. It focuses on the secure communication between parties and ensures the authenticity and confidentiality of data being transmitted. It is the responsibility of the individual parties to ensure the security of their own computer systems.

Question 16

All of the following are used for authentication except:
A) digital signatures.
B) certificates of authority.
C) biometric devices.
D) packet filters.

Accepted Answer

Packet filters are used for controlling access to network resources based on source and/or destination IP address, protocol, and port number. They are not used for authentication. Digital signatures, certificates of authority, and biometric devices are all used for authentication.

Question 17

Which of the following statements is not true?
A) Apple's Touch ID stores a digital replica of a user's actual fingerprint in Apple's iCloud.
B) Biometric devices reduce the opportunity for spoofing.
C) A retina scan is an example of a biometric device.
D) Biometric data stored on an iPhone is encrypted.

Accepted Answer

Apple's Touch ID does not store a digital replica of a user's actual fingerprint in Apple's iCloud. The fingerprint data is stored locally on the device and not accessible by Apple or any third-party apps.

Question 18

Which of the following is not an example of an access control?
A) firewalls
B) proxy servers
C) digital signatures
D) login passwords

Accepted Answer

Digital signatures are used for data integrity and authenticity, but not for controlling access to a system or resource. Firewalls, proxy servers, and login passwords all control access in different ways.

Question 19

Define the terms tiger team, white hat, black hat, and grey hat and discuss the difference between them.

Accepted Answer

The answer of Define the terms tiger team, white hat,...

Question 20

An intrusion detection system can perform all of the following functions except:
A) examining network traffic.
B) setting off an alarm when suspicious activity is detected.
C) checking network traffic to see if it matches certain patterns or preconfigured rules.
D) blocking suspicious activity.

Accepted Answer

An intrusion detection system (IDS) detects and alerts users of potential intrusions or attacks on a network, but it does not typically have the capability to block suspicious activity. This function is typically performed by an intrusion prevention system (IPS), which can actively stop malicious traffic from entering and compromising the network.

Quiz 4: E-Commerce Security and Payment Systems

All of the following are methods of securing channels of communication except:

All the following statements about symmetric key cryptography are true except:

Proxy servers are also known as:

Next generation firewalls provide all of the following except:

Which of the following statements is not true?

Which of the following dimensions of e-commerce security is not provided for by encryption?

A ________ is hardware or software that acts as a filter to prevent unwanted packets from entering a network.

The Data Encryption Standard uses a(n) ________-bit key.

A digital certificate contains all of the following except the:

All of the following are features of WPA3 except:

Discuss and explain the various types of malicious code and how they work. Include the different types of viruses.

All of the following statements about public key cryptography are true except:

Asymmetric key cryptography is also known as:

What is a sniffing attack and how does it differ from a MitM attack?

All of the following statements about PKI are true except:

All of the following are used for authentication except:

Which of the following statements is not true?

Which of the following is not an example of an access control?

Define the terms tiger team, white hat, black hat, and grey hat and discuss the difference between them.

An intrusion detection system can perform all of the following functions except: