15 extra multiple-choice questions for E-Commerce Security Systems (12th Standard Computer Applications, Samacheer Kalvi), beyond the ones printed in the textbook — each with the correct option highlighted and a clear, worked explanation. Free to read in English and Tamil.
Q1
Which type of payment fraud involves creating fake online shops that offer products at extremely low prices to collect buyers' credit card details?
- A. Clean fraud
- B. Friendly fraud
- C. Triangulation fraudCorrect
- D. Identity theft
Explanation. Triangulation fraud is a subset of payment fraud where fraudsters create fake online storefronts with low prices to harvest credit card data from unsuspecting customers.
Q2
Which dimension of e-commerce security refers to the capability of monitoring and tracking business activities to audit operations?
- A. Non-repudiation
- B. Review abilityCorrect
- C. Authenticity
- D. Effectiveness
Explanation. Review ability is the security dimension that provides the capability of monitoring activities to audit and track transaction operations.
Q3
How does the number of keys required grow as the number of users increases in a symmetric key encryption system?
- A. Linearly
- B. Logarithmically
- C. Constantly
- D. ExponentiallyCorrect
Explanation. In a symmetric key encryption system, the number of keys used grows exponentially with the number of users, whereas it grows linearly in asymmetric encryption.
Q4
In which year did Whitfield Diffie and Martin Hellman devise the public key encryption algorithm?
- A. 1970
- B. 1976Correct
- C. 1980
- D. 1987
Explanation. Public key encryption was devised in 1976 by Whitfield Diffie and Martin Hellman, using a mathematical process to share a secret key.
Q5
Which of the following cryptographic algorithms is classified under symmetric key encryption?
- A. RSA
- B. ECC
- C. RC4Correct
- D. DSA
Explanation. RC4, along with DES and AES, is a symmetric key encryption algorithm, whereas RSA, ECC, and DSA are asymmetric algorithms.
Q6
A digital signature is created using the Digital Signature Standard (DSS) and commonly uses which algorithm for encrypting and decrypting the message digest?
- A. MD5 or RC4
- B. SHA-1 or SHA-2Correct
- C. AES or DES
- D. Blowfish or Twofish
Explanation. Digital signatures under the Digital Signature Standard (DSS) use hashing algorithms like SHA-1 or SHA-2 to verify the integrity and origin of data.
Q7
Digital certificates issued by recognized Certification Authorities usually follow which of the following standard formats?
- A. SSL or SET
- B. DSS or SHA
- C. X.509 or PGPCorrect
- D. PKCS or AES
Explanation. Digital certificates are created in standardized formats, most commonly X.509 or Pretty Good Privacy (PGP) format.
Q8
Which company developed the Secure Sockets Layer (SSL) standard protocol in collaboration with MasterCard, Bank of America, MCI, and Silicon Graphics?
- A. NetscapeCorrect
- B. Microsoft
- C. IBM
- D. GTE
Explanation. Secure Sockets Layer (SSL) was developed by Netscape in collaboration with major partners to secure client-server communication.
Q9
The 3D Secure protocol gets its name from the three domains it links. Which of the following is NOT one of these three domains?
- A. The Acquirer Domain
- B. The Issuer Domain
- C. The Merchant DomainCorrect
- D. The Interoperability Domain
Explanation. The three domains of the 3D Secure protocol are the Acquirer Domain, the Issuer Domain, and the Interoperability Domain. There is no independent Merchant Domain.
Q10
According to the textbook, which popular domain name was once bought for 12 dollars by a former employee in September 2015 and later sold back for 6006.13 dollars?
- A. yahoo.com
- B. google.comCorrect
- C. amazon.com
- D. ebay.com
Explanation. In September 2015, the domain google.com was temporarily bought for 12 dollars by a former Google employee and subsequently sold back for 6006.13 dollars.
Q11
Which of the following is a classic example of Typopiracy, where fake websites take advantage of users' typographical errors?
- A. www.goggle.comCorrect
- B. www.googlesecure.org
- C. www.google-login.net
- D. www.google-india.in
Explanation. Typopiracy involves registering domain names that are common typos of popular sites, such as www.goggle.com for Google.
Q12
Which of the following is NOT listed in the textbook as an authorized Certifying Authority (CA) issuing digital certificates under the Government of India?
- A. TCS
- B. Safescrypt
- C. MTNL
- D. InfosysCorrect
Explanation. The textbook lists authorized Certifying Authorities (CA) under the Indian Government, including NIC, Safescrypt, TCS, MTNL, and e-Mudhra, but not Infosys.
Q13
What is the alternative name for Distributed Denial of Service (DDoS) attacks, which slow down or crash e-commerce servers by sending continuous overwhelming requests?
- A. Session hijacking
- B. Network floodingCorrect
- C. Cross-site scripting
- D. Phishing redirect
Explanation. Distributed Denial of Service (DDoS) attacks, which overwhelm servers using a botnet of compromised systems, are also known as network flooding.
Q14
In terms of key distribution and management, which encryption system has a number of keys that grows linearly with the number of users?
- A. Symmetric key encryption
- B. Asymmetric key encryptionCorrect
- C. Block cipher encryption
- D. Stream cipher encryption
Explanation. Under asymmetric key encryption, the number of keys used grows linearly as the user base expands, unlike symmetric encryption where key growth is exponential.
Q15
What type of payment fraud is committed when a customer makes an online purchase but intentionally and falsely files a claim or refund request after successfully receiving the goods?
- A. Clean fraud
- B. Friendly fraudCorrect
- C. Triangulation fraud
- D. Cybersquatting
Explanation. Friendly fraud occurs when an actual customer makes an online purchase and then intentionally files a false reclaim or refund dispute after receiving the items.
