Question 1

•	SPAM

Accepted Answer

avoiding
o	Avoid adding yourself to unwanted mailing lists 
o	Conduct online transactions through secure Web sites 
o	Do not assume that only the intended recipient will read your messages 
o	Be selective when posting information to newsgroups

Question 2

•	Cookie types:

Accepted Answer

o	persistent 
o	session 
o	first-party 
o	third-party 
o	You can control when and from whom cookies are accepted by specifying the level of privacy you want to maintain 
o	You can view the file content of cookies to see information about the Web site

Question 3

•	You can configure your browser’s security settings to accept, reject or prompt before accepting:

Accepted Answer

o	ActiveX controls 
o	JavaScript

Question 4

•	Authentication

Accepted Answer

– the process of verifying the identity of a user who logs on to a system, or the integrity of transmitted data

Question 5

	Anonymous logon

Accepted Answer

– no user name or password are required, and authentication is handled transparently by the browser and server

Question 6

	Basic authentication

Accepted Answer

– a user name and password are required, and that information is sent as plain text

Question 7

	Symmetric (private-key) encryption

Accepted Answer

– The same key is used to encrypt and decrypt messages

Question 8

	Asymmetric (public-key) encryption

Accepted Answer

– Two keys are used to encrypt and decrypt messages: a public key and a private key

Question 9

	Hash (one-way) encryption

Accepted Answer

– Uses hashes to verify the integrity of transmitted messages

Question 10

	Digital certificates

Accepted Answer

– you must have the proper digital certificate to gain access 
	User names and passwords – used to log on to private and public networks, including the Internet

Question 11

	Digital signatures

Accepted Answer

– electronic signatures that verify the identity of the message sender

Question 12

	Non-repudiation

Accepted Answer

– digital signatures prove that a transaction or transmission took place; neither the sender nor the receiver can later deny the action

Question 13

•	Encryption

Accepted Answer

– the process of converting data into an unreadable form of text

Question 14

•	Decryption

Accepted Answer

the process of converting the encrypted data back to its original form

Question 15

•	Key

Accepted Answer

a mathematical algorithm

Question 16

•	Secure Sockets Layer (SSL)

Accepted Answer

– a protocol for secure exchanges

Question 17

•	Various protocols in the TCP/IP suite can be made secure by running them over SSL/TLS, including:

Accepted Answer

o	HTTPS 
o	S/FTP 
o	IMAPS 
o	POP3S

Question 18

o	Virus

Accepted Answer

– damages computers and networks, often alters files to damage or destroy data

Question 19

o	Worm

Accepted Answer

– resides in active memory and replicates itself until an entire disk is full

Question 20

o	Trojan

Accepted Answer

– appears to be harmless (such as a computer game) but produces harmful results 
o	Illicit server – installs hidden services on systems

Question 21

	Client code

Accepted Answer

– allows remote access to a computer by an attacker

Question 22

	Server code

Accepted Answer

– infects destination computer and enables the attacker to control it

Question 23

•	Corporate IT departments are often the first line of defense against viruses 
o	Common ways to contract viruses:

Accepted Answer

	Receive infected disc/drive from colleague or friend 
	Download infected file 
	Download illicit server attachment

Question 24

•	Common ways to protect against viruses:

Accepted Answer

o	Do not open e-mail or attachments from unknown senders 
o	Configure browser and e-mail security to highest levels 
o	Use anti-virus software 
o	Keep anti-virus software current 
o	Stay informed about the latest virus threats 
o	Make backup copies o

Question 25

•	If you receive an attachment you do not recognize:

Accepted Answer

o	Do not open the attachment 
o	Contact the sender to determine whether the attachment is legitimate 
o	If you cannot contact the sender, delete the attachment from the message 
o	Delete the attachment from the Deleted Items folder

Question 26

•	If you suspect a virus attack:

Accepted Answer

o	Use anti-virus software to remove the virus 
o	If you cannot launch anti-virus software, reboot from a known clean system disk, then launch the anti-virus software 
o	Remove virus from all disks, files and programs 
o	If damage is too extensive, refo

Question 27

•	Spyware

Accepted Answer

– an application secretly placed on a user’s system to covertly gather information and relay it to outside parties, usually for advertising purposes

Question 28

o	Cookies are not spyware because:

Accepted Answer

	The user is aware of their presence 
	The user has the option to disable outside access to cookie information 
	Use spyware detection applications to detect and eliminate spyware

Question 29

•	Update

Accepted Answer

– a software upgrade that permanently fixes known bugs and improves software performance

Question 30

•	Patch

Accepted Answer

– a temporary bug fix

Question 31

•	Virus update

Accepted Answer

– files of virus signature profiles you use to keep your anti-virus software current

Question 32

•	Typosquatting

Accepted Answer

– registering a domain name similar to a high-volume site hoping to receive traffic from users seeking the high-volume site who mistakenly enter an incorrect URL in the browser

Question 33

•	Firewall

Accepted Answer

– a collection of hardware, software and corporate policies that prevents unauthorized access to or from private networks

Question 34

o	Use firewalls to:

Accepted Answer

	Prevent unauthorized Internet users from accessing private networks 
	Retain control of proprietary information 
	Prevent unauthorized export of proprietary information 
	Firewalls may prevent access to external e-mail providers or external server

Question 35

•	Licensing

Accepted Answer

o	To license copyright-protected material, you must obtain permission from the author

Question 36

•	Trademarks

Accepted Answer

o	To register a trademark, you must contact the appropriate agency in your home country

CIW~Exam

Lesson 8 Protecting yourself Online

Term	Definition
• SPAM	avoiding o Avoid adding yourself to unwanted mailing lists o Conduct online transactions through secure Web sites o Do not assume that only the intended recipient will read your messages o Be selective when posting information to newsgroups
• Cookie types:	o persistent o session o first-party o third-party o You can control when and from whom cookies are accepted by specifying the level of privacy you want to maintain o You can view the file content of cookies to see information about the Web site
• You can configure your browser’s security settings to accept, reject or prompt before accepting:	o ActiveX controls o JavaScript
• Authentication	– the process of verifying the identity of a user who logs on to a system, or the integrity of transmitted data
 Anonymous logon	– no user name or password are required, and authentication is handled transparently by the browser and server
 Basic authentication	– a user name and password are required, and that information is sent as plain text
 Symmetric (private-key) encryption	– The same key is used to encrypt and decrypt messages
 Asymmetric (public-key) encryption	– Two keys are used to encrypt and decrypt messages: a public key and a private key
 Hash (one-way) encryption	– Uses hashes to verify the integrity of transmitted messages
 Digital certificates	– you must have the proper digital certificate to gain access  User names and passwords – used to log on to private and public networks, including the Internet
 Digital signatures	– electronic signatures that verify the identity of the message sender
 Non-repudiation	– digital signatures prove that a transaction or transmission took place; neither the sender nor the receiver can later deny the action
• Encryption	– the process of converting data into an unreadable form of text
• Decryption	the process of converting the encrypted data back to its original form
• Key	a mathematical algorithm
• Secure Sockets Layer (SSL)	– a protocol for secure exchanges
• Various protocols in the TCP/IP suite can be made secure by running them over SSL/TLS, including:	o HTTPS o S/FTP o IMAPS o POP3S
o Virus	– damages computers and networks, often alters files to damage or destroy data
o Worm	– resides in active memory and replicates itself until an entire disk is full
o Trojan	– appears to be harmless (such as a computer game) but produces harmful results o Illicit server – installs hidden services on systems
 Client code	– allows remote access to a computer by an attacker
 Server code	– infects destination computer and enables the attacker to control it
• Corporate IT departments are often the first line of defense against viruses o Common ways to contract viruses:	 Receive infected disc/drive from colleague or friend  Download infected file  Download illicit server attachment
• Common ways to protect against viruses:	o Do not open e-mail or attachments from unknown senders o Configure browser and e-mail security to highest levels o Use anti-virus software o Keep anti-virus software current o Stay informed about the latest virus threats o Make backup copies o
• If you receive an attachment you do not recognize:	o Do not open the attachment o Contact the sender to determine whether the attachment is legitimate o If you cannot contact the sender, delete the attachment from the message o Delete the attachment from the Deleted Items folder
• If you suspect a virus attack:	o Use anti-virus software to remove the virus o If you cannot launch anti-virus software, reboot from a known clean system disk, then launch the anti-virus software o Remove virus from all disks, files and programs o If damage is too extensive, refo
• Spyware	– an application secretly placed on a user’s system to covertly gather information and relay it to outside parties, usually for advertising purposes
o Cookies are not spyware because:	 The user is aware of their presence  The user has the option to disable outside access to cookie information  Use spyware detection applications to detect and eliminate spyware
• Update	– a software upgrade that permanently fixes known bugs and improves software performance
• Patch	– a temporary bug fix
• Virus update	– files of virus signature profiles you use to keep your anti-virus software current
• Typosquatting	– registering a domain name similar to a high-volume site hoping to receive traffic from users seeking the high-volume site who mistakenly enter an incorrect URL in the browser
• Firewall	– a collection of hardware, software and corporate policies that prevents unauthorized access to or from private networks
o Use firewalls to:	 Prevent unauthorized Internet users from accessing private networks  Retain control of proprietary information  Prevent unauthorized export of proprietary information  Firewalls may prevent access to external e-mail providers or external server
• Licensing	o To license copyright-protected material, you must obtain permission from the author
• Trademarks	o To register a trademark, you must contact the appropriate agency in your home country

"Know" box contains:
Time elapsed:
Retries: