CIW Certification Suite — Questions and Answers

Question 1: Which Array method executes a reducer function on each element and returns a single accumulated value?

find()
reduce() (Correct answer)
some()
flat()

Correct answer: reduce()

reduce() applies a callback function against an accumulator and each element to reduce the array to a single value.

Question 2: In internet marketing, what is a conversion rate?

The rate at which images load on a page
The speed of currency conversion in international sales
The percentage of website visitors who complete a desired action (Correct answer)
The ratio of organic to paid traffic

Correct answer: The percentage of website visitors who complete a desired action

Conversion rate measures how effectively a website turns visitors into customers or leads by calculating desired actions divided by total visits.

Question 3: What is the correct HTML5 doctype declaration?

<?xml version="1.0" encoding="UTF-8"?>
<html version="5">
<!DOCTYPE html> (Correct answer)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 5.0//EN">

Correct answer: <!DOCTYPE html>

<!DOCTYPE html> is the simplified HTML5 doctype that instructs browsers to render the page in standards mode.

Question 4: Which SQL constraint ensures that a column cannot store NULL values?

UNIQUE
DEFAULT
NOT NULL (Correct answer)
CHECK

Correct answer: NOT NULL

The `NOT NULL` constraint prevents a column from accepting NULL values, requiring every row to have a valid value in that column.

Question 5: Which of the following is true for the prototype property?

Undefined (Correct answer)
Boolean
Null
String

Correct answer: Undefined

In JavaScript, the `prototype` property of an object is `undefined` by default if it has not been explicitly set or inherited. The `prototype` property is used to add new properties and methods to an object constructor, and its initial state before any additions is `undefined`. This allows for efficient inheritance and method sharing among objects.

Question 6: What HTML5 form attribute forces the user to fill in a field before the form can be submitted?

required (Correct answer)
validate
notnull
mandatory

Correct answer: required

The 'required' attribute triggers native browser-side validation, preventing form submission if the field is empty.

Question 7: Which HTTP status code indicates that a requested resource has been permanently moved to a new URL?

301 (Correct answer)
404
500
200

Correct answer: 301

HTTP 301 (Moved Permanently) tells browsers and search engines that a resource has permanently relocated to a new URL.

Question 8: Linda wishes to delete some of the cookies that her website's visitors have received from her server. What is the most effective method for her to complete this task?

Create a new cookie that includes the value=delete field with the name=value field.
Suspend the use of cookies for a short time so all the cookies on her visitors’ machines are not refreshed.
Change the date field to a date in the past. (Correct answer)
Create new cookies that contain the name=/dev/null value pair.

Correct answer: Change the date field to a date in the past.

To delete a cookie, the most effective method is to set its expiration date to a date in the past. When the browser checks the cookie's expiration, it will find that it has already expired and will remove it from the user's machine. This is a standard and reliable practice for invalidating and deleting cookies.

Question 9: What does ROI stand for in the context of internet business?

Record of Interactions
Return on Investment (Correct answer)
Revenue of Infrastructure
Rate of Internet

Correct answer: Return on Investment

Return on Investment (ROI) measures the profitability of an investment by comparing the net gain to the cost of the investment.

Question 10: What is a digital certificate primarily used for in e-commerce?

Authenticate identities and enable encrypted communications (Correct answer)
Track website visitor behavior
Manage email subscriptions
Compress web pages

Correct answer: Authenticate identities and enable encrypted communications

A digital certificate binds a public key to an entity's identity, enabling SSL/TLS encryption and verifying website authenticity.

Question 11: Which HTML5 element is used to define a block of navigation links?

<aside>
<header>
<nav> (Correct answer)
<section>

Correct answer: <nav>

The <nav> element is the semantic HTML5 element specifically intended to contain a set of navigation links.

Question 12: Which standard defines the rules for how web clients and servers communicate?

HTTP (HyperText Transfer Protocol) (Correct answer)
FTP specification
TCP/IP only
SMTP standard

Correct answer: HTTP (HyperText Transfer Protocol)

HTTP (HyperText Transfer Protocol) is the application-layer protocol that defines how web clients request resources and how servers respond.

Question 13: Which option best encapsulates the differences between a mobile app and a mobile Web site since the introduction of HTML5?

A mobile Web site is faster because it uses the mobile phone’s default browser.
A mobile Web site cannot create an immersive experience for users.
A mobile app is faster because it does not necessarily use the browser. (Correct answer)
A mobile app can be used on any operating system.

Correct answer: A mobile app is faster because it does not necessarily use the browser.

Mobile apps are typically compiled code that runs natively on the device's operating system, allowing them to leverage device hardware and resources directly. This often results in better performance and a more responsive user experience compared to mobile websites, which run within a browser and are limited by browser rendering and network speed. While HTML5 has improved mobile web capabilities, native apps still often offer superior speed and integration.

Question 14: What is a cookie in the context of web browsing and e-commerce?

A small data file stored on a user's computer by a website to remember information (Correct answer)
A server-side session encryption key
A type of malware
A type of web server log

Correct answer: A small data file stored on a user's computer by a website to remember information

A cookie is a small text file a website stores on the user's browser to remember preferences, login state, or shopping cart contents.

Question 15: What is affiliate marketing?

A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant (Correct answer)
A type of email spam campaign
Marketing limited to social media platforms
Marketing done by company employees only

Correct answer: A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant

Affiliate marketing pays third-party publishers a commission for generating traffic or sales for a merchant's products via tracked links.

Question 16: What does SEO stand for in internet marketing?

Social Engagement Outreach
Search Engine Optimization (Correct answer)
Site Encoding Order
Secure Email Operations

Correct answer: Search Engine Optimization

Search Engine Optimization (SEO) refers to strategies used to improve a website's visibility and ranking in organic search engine results.

Question 17: What is web hosting?

A type of web browser plugin
The process of designing website graphics
A service that stores website files on a server and makes them accessible via the internet (Correct answer)
Sending newsletters to subscribers

Correct answer: A service that stores website files on a server and makes them accessible via the internet

Web hosting provides server space, bandwidth, and infrastructure to store and serve website files to visitors worldwide.

Question 18: What is the difference between client-side and server-side scripting?

There is no difference — they are the same
Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser (Correct answer)
Client-side handles databases; server-side handles design
Client-side uses Python; server-side uses JavaScript

Correct answer: Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser

Client-side scripts (like JavaScript) execute in the visitor's browser, while server-side scripts (like PHP or Node.js) run on the server and send results to the browser.

Question 19: Which type of SQL JOIN returns only rows where there is a match in both tables?

FULL OUTER JOIN
RIGHT JOIN
LEFT JOIN
INNER JOIN (Correct answer)

Correct answer: INNER JOIN

An `INNER JOIN` returns only the rows that have matching values in both joined tables.

Question 20: Which of the following best describes cloud computing in a business context?

Storing data only on physical office servers
Using only wired internet connections
Delivering computing services — servers, storage, software — over the internet on demand (Correct answer)
A type of cybersecurity firewall

Correct answer: Delivering computing services — servers, storage, software — over the internet on demand

Cloud computing provides on-demand access to shared computing resources over the internet, eliminating the need for large on-premise infrastructure.

Question 21: What does URL stand for and what is its purpose?

Unified Routing Language — defines network routing rules
User Registration Login — authenticates site visitors
Universal Resource Locator — specifies the address of a resource on the internet (Correct answer)
Universal Request Layer — handles HTTP requests

Correct answer: Universal Resource Locator — specifies the address of a resource on the internet

A URL (Uniform Resource Locator) is the full address used to access a specific resource on the internet, including protocol, domain, and path.

Question 22: In HTML, which attribute is used to specify an alternative text description for an image?

alt (Correct answer)
caption
title
src

Correct answer: alt

The alt attribute provides alternative text for images, aiding accessibility and displaying when images fail to load.

Question 23: What is SQL injection?

A method of speeding up SQL queries
A database backup technique
An attack that inserts malicious SQL code into input fields to manipulate a database (Correct answer)
A type of stored procedure

Correct answer: An attack that inserts malicious SQL code into input fields to manipulate a database

SQL injection exploits insufficient input validation by inserting malicious SQL statements into fields, potentially exposing or corrupting database data.

Question 24: What is a wireframe's role in the web development process?

Generate database schemas
Create a low-fidelity structural layout to plan page content and user interface before coding begins (Correct answer)
Test server load capacity
Write the final production code

Correct answer: Create a low-fidelity structural layout to plan page content and user interface before coding begins

A wireframe is a skeletal blueprint created early in the design process to define page structure, layout, and content hierarchy before visual design.

Question 25: What is the primary role of a web server?

Design website layouts
Write SQL queries
Store and deliver web content to clients over HTTP/HTTPS (Correct answer)
Generate CSS stylesheets

Correct answer: Store and deliver web content to clients over HTTP/HTTPS

A web server receives HTTP requests from clients (browsers) and responds by delivering requested files — HTML, CSS, images, etc.

Question 26: What does a 404 HTTP status code mean?

The client is unauthorized to access the resource
The requested resource was not found on the server (Correct answer)
The request was successful
The server is temporarily unavailable

Correct answer: The requested resource was not found on the server

A 404 Not Found error means the server could not locate the resource at the requested URL, often due to a broken or outdated link.

Question 27: What class of intellectual property comprises company strategies, confidential software, and sales agreements?

Trademark
Copy left
Copyright
Trade secret (Correct answer)

Correct answer: Trade secret

Trade secrets are a form of intellectual property that includes confidential business information, such as company strategies, proprietary software, formulas, practices, and sales agreements, that provides a competitive edge. Unlike patents or copyrights, trade secrets are protected by keeping the information secret, rather than through registration. Misappropriation of trade secrets is illegal.

Question 28: Which of the following is an example of a strong password practice?

Using the same password for all accounts for easy remembering
Using your birthday as your password
Using a long, unique combination of letters, numbers, and symbols for each account (Correct answer)
Writing passwords on sticky notes near your monitor

Correct answer: Using a long, unique combination of letters, numbers, and symbols for each account

Strong password hygiene requires long, complex, unique passwords for each account — ideally managed with a password manager.

Question 29: Which HTML5 element is used to draw raster graphics dynamically via JavaScript?

<canvas> (Correct answer)
<graphics>
<svg>
<draw>

Correct answer: <canvas>

The <canvas> element provides a resolution-dependent bitmap area that JavaScript can use to render 2D graphics, charts, and animations.

Question 30: Which file format is best suited for photographic images on the web due to its lossy compression?

GIF
JPEG (Correct answer)
SVG
PNG

Correct answer: JPEG

JPEG uses lossy compression optimized for photographs, producing small file sizes with acceptable quality loss.

Question 31: Which HTML5 element represents a self-contained composition that could be independently distributed, such as a blog post?

<article> (Correct answer)
<section>
<main>
<aside>

Correct answer: <article>

The <article> element represents content that is self-contained and could stand alone, such as a news article, blog post, or forum entry.

Question 32: In a client-server model, which component initiates the request for resources?

Server
Client (Correct answer)
Router
DNS resolver

Correct answer: Client

The client initiates requests to the server, which then responds with the requested resources or data.

Question 33: What does SSL/TLS provide for web-based transactions?

Encrypted communication between the browser and web server (Correct answer)
Automated product recommendation
Faster server response times
Inventory management

Correct answer: Encrypted communication between the browser and web server

SSL/TLS encrypts data in transit between a client's browser and the web server, protecting sensitive information like credit card numbers.

Question 34: Which type of e-commerce transaction occurs between two private individuals, such as on eBay or Craigslist?

B2B
G2C
B2C
C2C (Correct answer)

Correct answer: C2C

C2C (Consumer-to-Consumer) commerce involves transactions between private individuals, often facilitated by a third-party platform.

Question 35: What is e-commerce?

The buying and selling of goods and services over the internet (Correct answer)
Electronic document management
Email marketing only
Internet service provider billing

Correct answer: The buying and selling of goods and services over the internet

E-commerce encompasses all commercial transactions — buying, selling, and exchanging goods or services — conducted electronically over the internet.

Question 36: Which HTML5 element is used to define the main content area of a document, excluding headers, footers, and navigation?

<body>
<content>
<article>
<main> (Correct answer)

Correct answer: <main>

The <main> element identifies the dominant content of the document body and should appear only once per page.

Question 37: What does the 'this' keyword refer to inside an arrow function?

The arrow function itself
undefined in strict mode
The enclosing lexical context (Correct answer)
The global object always

Correct answer: The enclosing lexical context

Arrow functions do not have their own 'this'; they inherit it from the surrounding lexical scope.

Question 38: In database design, what is denormalization?

Converting a relational database to flat files
Removing all indexes from a database
Encrypting database columns
Intentionally introducing redundancy to improve read performance (Correct answer)

Correct answer: Intentionally introducing redundancy to improve read performance

Denormalization deliberately adds redundant data to reduce complex joins, trading write efficiency for faster read queries.

Question 39: Which CSS property is used to control the transparency of an element?

visibility
opacity (Correct answer)
blur
display

Correct answer: opacity

The `opacity` property sets the transparency level of an element, where 0 is fully transparent and 1 is fully opaque.

Question 40: What does authentication verify in information security?

The identity of a user or system trying to access a resource (Correct answer)
The integrity of a database backup
The encryption strength of a message
The availability of a web server

Correct answer: The identity of a user or system trying to access a resource

Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.

Question 41: Which web technology allows web pages to update content dynamically without reloading the entire page?

AJAX (Asynchronous JavaScript and XML) (Correct answer)
HTML tables
CSS animations
FTP uploads

Correct answer: AJAX (Asynchronous JavaScript and XML)

AJAX allows web pages to fetch data from a server asynchronously and update parts of the page without a full reload.

Question 42: In JavaScript, what does the spread operator (...) do when used with an array?

Creates a deep copy of nested objects
Merges arrays without removing duplicates
Expands the array into individual elements (Correct answer)
Converts an array to a Set

Correct answer: Expands the array into individual elements

The spread operator unpacks an array's elements so they can be passed individually as function arguments or combined into another array.

Question 43: What is a Content Delivery Network (CDN) primarily used for?

Write server-side code
Send marketing emails
Monitor server uptime
Distribute web content from geographically dispersed servers to reduce latency (Correct answer)

Correct answer: Distribute web content from geographically dispersed servers to reduce latency

A CDN caches and serves static assets from servers geographically close to the end user, reducing load times and server load.

Question 44: Which CSS display value causes an element to start on a new line and stretch the full available width?

inline
inline-block
block (Correct answer)
flex

Correct answer: block

A `block`-level element always starts on a new line and takes up the full width of its container.

Question 45: In internet business, what is a viral marketing campaign?

A strategy designed to encourage people to share content rapidly, spreading the message exponentially (Correct answer)
A campaign that uses malware to spread messages
A paid advertising campaign
An email campaign sent to virus-infected computers

Correct answer: A strategy designed to encourage people to share content rapidly, spreading the message exponentially

Viral marketing creates highly shareable content that spreads organically through social sharing, multiplying reach at little additional cost.

Question 46: Which HTTP status code indicates that a resource has been permanently moved to a new URL?

500 Internal Server Error
404 Not Found
200 OK
301 Moved Permanently (Correct answer)

Correct answer: 301 Moved Permanently

HTTP 301 tells clients and search engines that the resource has permanently relocated to a new URL.

Question 47: In CSS, what does the `z-index` property control?

Horizontal position on the z-axis
Stacking order of overlapping positioned elements (Correct answer)
Font size scaling
Zoom level of an element

Correct answer: Stacking order of overlapping positioned elements

The `z-index` property determines which positioned element appears on top when elements overlap.

Question 48: What is a payment gateway in e-commerce?

A digital currency wallet
A service that authorizes and processes online credit/debit card transactions (Correct answer)
A physical bank ATM connected to the internet
The checkout page design template

Correct answer: A service that authorizes and processes online credit/debit card transactions

A payment gateway is a merchant service that securely transmits payment data between buyers, merchants, and financial institutions.

Question 49: What is social engineering in cybersecurity?

Automating security awareness training
Manipulating people through psychological tactics to divulge confidential information or perform harmful actions (Correct answer)
Building secure social network APIs
Engineering software for social media platforms

Correct answer: Manipulating people through psychological tactics to divulge confidential information or perform harmful actions

Social engineering exploits human psychology rather than technical vulnerabilities to trick individuals into compromising security.

Question 50: Which protocol is used by web browsers to securely request and receive web pages?

FTP
HTTPS (Correct answer)
POP3
SMTP

Correct answer: HTTPS

HTTPS (HyperText Transfer Protocol Secure) encrypts communication between browser and server using TLS, protecting data in transit.

Question 51: What is the function of DNS (Domain Name System)?

Encrypt network traffic
Assign bandwidth to users
Translate human-readable domain names into IP addresses (Correct answer)
Store website backup files

Correct answer: Translate human-readable domain names into IP addresses

DNS acts as the internet's phone book, converting memorable domain names like www.example.com into the numeric IP addresses computers use.

Question 52: Which CSS property controls the space between the content and the border of an element?

padding (Correct answer)
outline
border-spacing
margin

Correct answer: padding

The CSS `padding` property defines the space between an element's content and its border.

Question 53: Which HTML5 input type provides built-in validation for email address format?

type="address"
type="mail"
type="email" (Correct answer)
type="text"

Correct answer: type="email"

type="email" instructs the browser to validate that the entered value matches an email address format before form submission.

Question 54: Which JavaScript method returns a new array containing only elements that pass a provided test function?

reduce()
map()
filter() (Correct answer)
forEach()

Correct answer: filter()

filter() creates a new array with all elements for which the callback returns a truthy value.

Question 55: Which SQL clause is used to filter groups after a GROUP BY operation?

FILTER
WHERE
AND
HAVING (Correct answer)

Correct answer: HAVING

The `HAVING` clause filters the result of GROUP BY aggregations, similar to how WHERE filters individual rows.

CIW Certification Suite

CIW (Certified Internet Webmaster) certifications validate expertise across web design, internet business, site development, and web security. Exams are vendor-neutral, computer-based, and cover foundational to specialist-level web technology skills.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

ciwcertified.com — Exam format, passing score, time limit, test delivery, renewal, score release, score validity, retake policy, eligibility, fees · verified Oct 2026