230303_5.6_SafeComputing

Many Web browsers allow users to open anonymous windows. During a browsing session in an anonymous window, the browser does not record a browsing history or a list of downloaded files. When the anonymous window is exited, cookies created during the session are deleted. Which of the following statements about browsing sessions in an anonymous window is true?

• The activities of a user browsing in an anonymous window will not be visible to people who monitor the user’s network, such as the system administrator.

• Items placed in a Web store’s shopping cart for future purchase during the anonymous browsing session will not be saved on the user’s computer.

• A user will not be able to log in to e-mail or social media accounts during the anonymous browsing session.

• A user browsing in an anonymous window will be protected from viruses launched from any Web sites visited or files downloaded.

A bank customer receives an e-mail from a sender claiming to be a bank employee. The e-mail asks the customer to provide personal information and to call a phone number if he or she has any questions. The customer suspects the e-mail might be a phishing attempt. Which of the following responses is most likely to be a privacy risk for the bank customer?

• Calling the bank at its official phone number to ask whether the request for personal information is legitimate

• Calling the phone number given in the e-mail and providing the personal information over the phone

• Checking that the domain name of the sender’s e-mail address is associated with the bank

• Conducting aWeb search to see if other people have received similar requests for personal information

Which of the following has the greatest potential for compromising a user’s personal privacy?

• A group of cookies stored by the user’s Web browser

• The Internet Protocol (IP) address of the user’s computer

• The user’s e-mail address

• The user’s public key used for encryption

StreamPal is an audio-streaming application for mobile devices that allows users to listen to streaming music and connect with other users who have similar taste in music. After downloading the application, each user creates a username, personal profile, and contact list of friends who also use the application.

The application uses the device’s GPS unit to track a user’s location. Each time a user listens to a song, the user can give it a rating from 0 to 5 stars. The user can access the following features for each song that the user has rated.

A list of users on the contact list who have given the song the same rating, with links to those users’ profiles

A map showing all other users in the area who have given the song the same rating, with links to those users’ profiles

A basic StreamPal account is free, but it displays advertisements that are based on data collected by the application. For example, if a user listens to a particular artist, the application may display an advertisement for concert tickets the next time the artist comes to the user’s city. Users have the ability to pay a monthly fee for a premium account, which removes advertisements from the application.

Question

Which of the following is most likely to be a data privacy concern for StreamPal users?

• Users of the application are required to rate songs in order to enable all of the application’s features.

• Users of the application may have the ability to determine information about the locations of users that are not on their contact list.

• Users of the application may not be able to use the application if they are located in an area with a poor Internet connection.

• Users of the application may not have similar music taste to any other users on their contact list.

StreamPal is an audio-streaming application for mobile devices that allows users to listen to streaming music and connect with other users who have similar taste in music. After downloading the application, each user creates a username, personal profile, and contact list of friends who also use the application.

The application uses the device’s GPS unit to track a user’s location. Each time a user listens to a song, the user can give it a rating from 0 to 5 stars. The user can access the following features for each song that the user has rated.

A list of users on the contact list who have given the song the same rating, with links to those users’ profiles

A map showing all other users in the area who have given the song the same rating, with links to those users’ profiles

A basic StreamPal account is free, but it displays advertisements that are based on data collected by the application. For example, if a user listens to a particular artist, the application may display an advertisement for concert tickets the next time the artist comes to the user’s city. Users have the ability to pay a monthly fee for a premium account, which removes advertisements from the application.

Question

Which of the following statements is most likely true about the differences between the basic version and the premium version of StreamPal?

• Users of the basic version of StreamPal are more likely to give songs higher ratings than are users of the premium version of StreamPal.

• Users of the basic version of StreamPal indirectly support StreamPal by allowing themselves to receive advertisements.

• Users of the basic version of StreamPal spend more on monthly fees than do users of the premium version of StreamPal.

• Users of the basic version of StreamPal use less data storage space on their devices than do users of the premium version of StreamPal.

Which of the following are true statements about digital certificates in Web browsers?

I. Digital certificates are used to verify the ownership of encrypted keys used in secured communication.

II. Digital certificates are used to verify that the connection to a Web site is fault tolerant.

• I only

• II only

• I and II

• Neither I nor II

In public key cryptography, the sender uses the recipient’s public key to encrypt a message. Which of the following is needed to decrypt the message?

• The sender’s public key

• The sender’s private key

• The recipient’s public key

• The recipient’s private key

A Web site uses several strategies to prevent unauthorized individuals from accessing user accounts. Which of the following is NOT an example of multifactor authentication?

• Each employee for a company is issued a USB device that contains a unique token code. To log into a company computer, an employee must insert the USB device into the computer and provide a correct password.

• After logging into an account from a new device, a user must enter a code that is sent via e-mail to the e-mail address on file with the account.

• In order to log into an account, a user must provide both a password and a fingerprint that is captured using the user’s device.

• When a user enters an incorrect password more than two times in a row, the user is locked out of the account for 24 hours.

Which of the following is an example of symmetric encryption?

• Evy buys a locked box that operates using two different codes. When the first code is entered, a slot opens that allows a message to be put in the box. When the second code is entered, the door to the box opens. Evy gives the first code to her friends so they can leave messages for her and keeps the second code to herself so that she is the only one who can retrieve the messages.

• Finn and Gwen develop a system that maps each letter of the alphabet to a unique symbol using a secret key. Finn uses the key to write a message to Gwen where each letter is replaced with the corresponding symbol. Gwen uses the key to map each symbol back to the original letter.

• Hannah writes a message to send to Isabel and hides the message under a rock behind the soccer field. Hannah gives Isabel the exact location of the rock so that only Isabel can find the message.

• Juan writes a message to send to Kelly and slides the message through a slot in the front of Kelly’s locker. Juan knows that Kelly has not shared her locker combination with anyone, so no one other than Kelly will be able to read the message.

A user unintentionally installs keylogging software on a computer. Which of the following is an example of how the keylogging software can be used by an unauthorized individual to gain access to computing resources?

• The software gives an unauthorized individual remote access to the computer, allowing the individual to search the computer for personal information.

• The software installs a virus on the computer and prompts the user to make a payment to the unauthorized individual to remove the virus.

• The software prompts the user to enter personal information to verify the user’s identity. This personal information is recorded and transmitted to an unauthorized individual.

• The software records all user input on the computer. The recorded information is transmitted to an unauthorized individual, who analyzes it to determine the user’s login passwords.