IS386 Final Exam
Name_ Katelyn Baumgart ____
MULTIPLE CHOICE. Choose the one alternative that best completes the statement or answers
the question.
1)
The estimated cost, loss, or damage that can result if a threat exploits a vulnerability best describes
1)
__B____
A)
present value of risk.
B)
exposure.
C)
total cost of ownership.
D)
risk feasibility assessment.
2)
The process of determining whether a card is active and whether the customer has suffcient funds for
the purchase is called
2)
__A____
A)
authorization.
B)
approval.
C)
settlement.
D)
procurement.
3)
An electronic card that contains information that can be used for payment purposes best describes
3)
__B____
A)
host card.
B)
payment card.
C)
pocket card.
D)
funds card.
4)
Which of the following participants in the online card payment process is the data center that processes
card transactions and settles funds to merchants?
4)
__C____
A)
customer
B)
merchant
C)
processor
D)
acquiring bank
5)
Which of the following participants in the online card payment process is the financial institution that
provides card services to banks?
5)
_D_____
A)
processor
B)
acquiring bank
C)
issuing bank
D)
credit card association
6)
An electronic card containing an embedded microchip that enables prede4ned operations or the addition,
deletion, or manipulation of information on the card best de4nes
6)
_C_____
A)
EPROM card.
B)
secure card.
C)
smart card.
D)
pocket card.
7)
Small online payments, typically under $10, are referred to as ________.
7)
_A_____
A)
e–micropayments
B)
contactless payments
C)
automated payments
D)
e–minipayments
8)
In global trade, a ________ is a written agreement by a bank to pay the seller, on account of the buyer, a
sum of money upon presentation of certain documents.
8)
_D_____
A)
letter of credit
B)
trade card payment
C)
micropayment
D)
bank check
9)
The probability that a vulnerability will be known and used best describes
9)
_D_____
A)
feasibility.
B)
splog point.
C)
security fault.
D)
risk.
10)
The success and security of EC can be measured by
10)
C_____
A)
authentication, authorization, and nonrepudiation.
B)
encryption, functionality, and privacy.
C)
con4dentiality, integrity, and availability.
D)
quality, reliability, and speed.
IS386 Final Exam
11)
Which of the following refers to the process of identifying, quantifying, and prioritizing the vulnerabilities
in a system?
11)
_A____
A)
vulnerability assessment
B)
certi4cation audit
C)
initial security report
