ECOM 210 Final Exam

cell phones and smart phones.
PDAs.
portable computers.
All of the above

Music and video
Mobile games
Mobile gambling
All of the above

mobile devices, network access points, and servers.
WAP gateways, GPS locators, and GPS satellites.
PDAs, smartphones, and PCs.
web servers, mobile devices, and microbrowsers.

brick-and-mortar retailers.
virtual or pure-play companies.
click-and-mortar retailers.
channel partners.

spamming.
invasion of privacy.
theft of intellectual property.
security.

market maker.
transaction broker.
content disseminator.
viral marketer.

the policy of least privilege, where access to network resources is blocked and permitted only when needed to conduct business.
the policy of acceptable use, where access is restricted by the firewall.
role-specific security protocols, where access is limited by a user’s level of trust.
the policy of need to know, where access by all nonemployees is blocked.

access control determines which persons, programs, or machines can legitimately use a network resource and which resources he, she, or it can use.
access control lists (ACLs) define users’ rights, such as what they are allowed to read, view, write, print, copy, delete, execute, modify, or move.
all resources need to be considered together to identify the rights of users or categories of users.
after a user has been identified, the user must be authenticated.

Social engineering is a type of nontechnical attack to circumvent technological security measures by manipulating people to disclose crucial authentication information.
Even though most people are aware of phishing scams, phishers still remain a serious threat because they change their tactics and too many users are easily tricked by the scams.
The time to exploitation of today’s most sophisticated spyware and worms has increased from days to weeks because of stronger firewalls.
All of the above

improving network performance.
helping control inbound traffic to a network.
helping control outbound traffic to a network.
hiding the IP addresses of a company’s internal computers.

a brick-and-mortar strategy.
a shared-service mall strategy.
a click-and-mortar strategy.
direct marketing from a manufacturer.

digital envelope.
message digest.
hash.
public key.

difficulty of use.
independence.
anonymity.
divisibility.

Company ABC sells machine parts to its 20 customers using a print catalog.
Company ABC participates with other producers and buyers to sell and buy machine parts on a central website.
Company ABC sells machine parts to its 20 customers on its website.
Company ABC sells CDs to the public on its website.

Trademark
Patent
Intellectual property
Copyright

direct mailings.
cookies that allow a website to store on the user’s PC.
spyware that gathers user information through an Internet connection without the user’s knowledge.
data mining to analyze clickstream data.