CIW Certification Suite — Questions and Answers

Question 1: What is a payment gateway in e-commerce?

A digital currency wallet
A service that authorizes and processes online credit/debit card transactions (Correct answer)
A physical bank ATM connected to the internet
The checkout page design template

Correct answer: A service that authorizes and processes online credit/debit card transactions

A payment gateway is a merchant service that securely transmits payment data between buyers, merchants, and financial institutions.

Question 2: Which JavaScript method returns a new array containing only elements that pass a provided test function?

forEach()
filter() (Correct answer)
map()
reduce()

Correct answer: filter()

filter() creates a new array with all elements for which the callback returns a truthy value.

Question 3: What is the difference between client-side and server-side scripting?

Client-side handles databases; server-side handles design
Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser (Correct answer)
There is no difference — they are the same
Client-side uses Python; server-side uses JavaScript

Correct answer: Client-side runs in the user's browser; server-side runs on the web server before sending content to the browser

Client-side scripts (like JavaScript) execute in the visitor's browser, while server-side scripts (like PHP or Node.js) run on the server and send results to the browser.

Question 4: Which CSS property controls the space between the content and the border of an element?

margin
border-spacing
outline
padding (Correct answer)

Correct answer: padding

The CSS `padding` property defines the space between an element's content and its border.

Question 5: What does URL stand for and what is its purpose?

Universal Request Layer — handles HTTP requests
User Registration Login — authenticates site visitors
Unified Routing Language — defines network routing rules
Universal Resource Locator — specifies the address of a resource on the internet (Correct answer)

Correct answer: Universal Resource Locator — specifies the address of a resource on the internet

A URL (Uniform Resource Locator) is the full address used to access a specific resource on the internet, including protocol, domain, and path.

Question 6: What is the correct HTML5 doctype declaration?

<html version="5">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 5.0//EN">
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html> (Correct answer)

Correct answer: <!DOCTYPE html>

<!DOCTYPE html> is the simplified HTML5 doctype that instructs browsers to render the page in standards mode.

Question 7: The information 2E22:4F00:000E:00D0:A267:97FF:FE6B:FE34 is referenced by which of the following?

An IPv6 address (Correct answer)
AnIPv4address
An IP diagnostic loopback address
A MAC address

Correct answer: An IPv6 address

The given string 2E22:4F00:000E:00D0:A267:97FF:FE6B:FE34 is an example of an IPv6 address. IPv6 addresses are 128-bit hexadecimal numbers, typically written as eight groups of four hexadecimal digits separated by colons. In contrast, IPv4 addresses consist of four decimal numbers separated by dots, and MAC addresses are usually 12 hexadecimal digits separated by hyphens or colons.

Question 8: In HTML, which attribute is used to specify an alternative text description for an image?

alt (Correct answer)
src
caption
title

Correct answer: alt

The alt attribute provides alternative text for images, aiding accessibility and displaying when images fail to load.

Question 9: What is the function of DNS (Domain Name System)?

Assign bandwidth to users
Translate human-readable domain names into IP addresses (Correct answer)
Encrypt network traffic
Store website backup files

Correct answer: Translate human-readable domain names into IP addresses

DNS acts as the internet's phone book, converting memorable domain names like www.example.com into the numeric IP addresses computers use.

Question 10: What does normalization in database design primarily aim to eliminate?

Foreign keys
Indexes
NULL values
Data redundancy and update anomalies (Correct answer)

Correct answer: Data redundancy and update anomalies

Normalization restructures tables to minimize data redundancy and prevent insertion, update, and deletion anomalies.

Question 11: Which SQL aggregate function returns the number of rows that match a specified condition?

SUM()
AVG()
TOTAL()
COUNT() (Correct answer)

Correct answer: COUNT()

The `COUNT()` function returns the number of rows (or non-NULL values in a column) that satisfy the query conditions.

Question 12: What is web hosting?

A type of web browser plugin
The process of designing website graphics
A service that stores website files on a server and makes them accessible via the internet (Correct answer)
Sending newsletters to subscribers

Correct answer: A service that stores website files on a server and makes them accessible via the internet

Web hosting provides server space, bandwidth, and infrastructure to store and serve website files to visitors worldwide.

Question 13: Which SQL constraint ensures that a column cannot store NULL values?

DEFAULT
UNIQUE
CHECK
NOT NULL (Correct answer)

Correct answer: NOT NULL

The `NOT NULL` constraint prevents a column from accepting NULL values, requiring every row to have a valid value in that column.

Question 14: Which HTML5 element is used to define a block of navigation links?

<section>
<header>
<nav> (Correct answer)
<aside>

Correct answer: <nav>

The <nav> element is the semantic HTML5 element specifically intended to contain a set of navigation links.

Question 15: What is the main difference between shared hosting and dedicated hosting?

Shared hosting means many websites share one server's resources; dedicated hosting gives one website its own server (Correct answer)
Dedicated hosting is only for e-commerce sites
Shared hosting uses Linux; dedicated uses Windows
Shared hosting is faster than dedicated

Correct answer: Shared hosting means many websites share one server's resources; dedicated hosting gives one website its own server

Shared hosting splits server resources among many customers, lowering cost but reducing performance, while dedicated hosting reserves an entire server for one client.

Question 16: What is multi-factor authentication (MFA)?

Using the same password across multiple sites
Using multiple passwords for one account
Requiring two or more verification factors (something you know, have, or are) to authenticate (Correct answer)
Logging in from multiple devices simultaneously

Correct answer: Requiring two or more verification factors (something you know, have, or are) to authenticate

MFA requires at least two independent authentication factors — such as a password plus a one-time code — dramatically reducing account compromise risk.

Question 17: Which of the following methods will aid in safeguarding your computer from malware attacks?

Open e-mail attachments only from unknown senders
Configure security settings for your Web browser to the lowest possible level
Perform regular backups of your hard drive
Update the definitions for your malware protection application frequently (Correct answer)

Correct answer: Update the definitions for your malware protection application frequently

Malware protection applications rely on definition files to identify known threats. New malware emerges constantly, so frequently updating these definitions ensures your software can detect and protect against the latest viruses, worms, and other malicious programs. This proactive measure is crucial for maintaining effective security against evolving threats.

Question 18: What class of intellectual property comprises company strategies, confidential software, and sales agreements?

Trademark
Copy left
Copyright
Trade secret (Correct answer)

Correct answer: Trade secret

Trade secrets are a form of intellectual property that includes confidential business information, such as company strategies, proprietary software, formulas, practices, and sales agreements, that provides a competitive edge. Unlike patents or copyrights, trade secrets are protected by keeping the information secret, rather than through registration. Misappropriation of trade secrets is illegal.

Question 19: What does ROI stand for in the context of internet business?

Rate of Internet
Revenue of Infrastructure
Record of Interactions
Return on Investment (Correct answer)

Correct answer: Return on Investment

Return on Investment (ROI) measures the profitability of an investment by comparing the net gain to the cost of the investment.

Question 20: Which color model is primarily used for colors displayed on computer monitors and web browsers?

RGB (Correct answer)
CMYK
Pantone
HSL only

Correct answer: RGB

Monitors use the RGB (Red, Green, Blue) additive color model to produce on-screen colors.

Question 21: What is the purpose of a wireframe in the web design process?

Create a low-fidelity blueprint of page layout and content structure (Correct answer)
Define the final color palette
Write all JavaScript functionality
Generate server-side code

Correct answer: Create a low-fidelity blueprint of page layout and content structure

A wireframe is a simple schematic that outlines page structure and content placement before visual design begins.

Question 22: Digital signatures confirm the sender's identity, the accuracy of the contents, and

Sign digital certificate requests
Provide data confidentiality
Enforce non-repudiation (Correct answer)
Create certificate requests

Correct answer: Enforce non-repudiation

Digital signatures provide assurance of the sender's identity and the integrity of the message, meaning the content has not been altered. A key benefit is non-repudiation, which prevents the sender from later denying that they sent the message or signed the document. This is achieved by linking the signature to the sender's private key, which only they possess.

Question 23: In CSS, what does the `z-index` property control?

Stacking order of overlapping positioned elements (Correct answer)
Font size scaling
Zoom level of an element
Horizontal position on the z-axis

Correct answer: Stacking order of overlapping positioned elements

The `z-index` property determines which positioned element appears on top when elements overlap.

Question 24: What is the purpose of a shopping cart on an e-commerce website?

Allow customers to select and temporarily hold items before purchasing (Correct answer)
Track user login sessions
Generate product reviews
Manage supplier invoices

Correct answer: Allow customers to select and temporarily hold items before purchasing

An e-commerce shopping cart lets users accumulate selected products before proceeding to checkout and payment.

Question 25: Which HTML5 element is used to draw raster graphics dynamically via JavaScript?

<svg>
<draw>
<canvas> (Correct answer)
<graphics>

Correct answer: <canvas>

The <canvas> element provides a resolution-dependent bitmap area that JavaScript can use to render 2D graphics, charts, and animations.

Question 26: What does SEO stand for in internet marketing?

Social Engagement Outreach
Secure Email Operations
Site Encoding Order
Search Engine Optimization (Correct answer)

Correct answer: Search Engine Optimization

Search Engine Optimization (SEO) refers to strategies used to improve a website's visibility and ranking in organic search engine results.

Question 27: What is e-commerce?

Email marketing only
Internet service provider billing
The buying and selling of goods and services over the internet (Correct answer)
Electronic document management

Correct answer: The buying and selling of goods and services over the internet

E-commerce encompasses all commercial transactions — buying, selling, and exchanging goods or services — conducted electronically over the internet.

Question 28: What is ransomware?

Malware that encrypts a victim's files and demands payment for the decryption key (Correct answer)
Software that speeds up computer performance
A tool for recovering deleted files
A type of antivirus software

Correct answer: Malware that encrypts a victim's files and demands payment for the decryption key

Ransomware is malicious software that encrypts files on the victim's system, then demands a ransom payment in exchange for the decryption key.

Question 29: What is the primary purpose of a privacy policy on a website?

Define the site's refund policy
Prevent search engine indexing
Improve page load speed
Inform users how their personal data is collected, used, and protected (Correct answer)

Correct answer: Inform users how their personal data is collected, used, and protected

A privacy policy discloses how a site collects, uses, stores, and shares users' personal information, often required by law.

Question 30: Which protocol is used by web browsers to securely request and receive web pages?

SMTP
FTP
HTTPS (Correct answer)
POP3

Correct answer: HTTPS

HTTPS (HyperText Transfer Protocol Secure) encrypts communication between browser and server using TLS, protecting data in transit.

Question 31: What is the result of: typeof null in JavaScript?

'boolean'
'null'
'object' (Correct answer)
'undefined'

Correct answer: 'object'

typeof null returns 'object' due to a historic bug in JavaScript that was never corrected for backward compatibility.

Question 32: What is the purpose of minifying CSS and JavaScript files?

Encrypt code from competitors
Enable dark mode on websites
Improve code readability
Reduce file size by removing whitespace and comments to speed up page load (Correct answer)

Correct answer: Reduce file size by removing whitespace and comments to speed up page load

Minification removes unnecessary whitespace, comments, and characters from code files, reducing their size and improving page load performance.

Question 33: What is a sitemap.xml file used for in web development?

Style the visual layout of a website
Configure server-side redirects
List all pages of a website to help search engines discover and crawl content (Correct answer)
Define user permissions

Correct answer: List all pages of a website to help search engines discover and crawl content

A sitemap.xml file lists a site's URLs and metadata to guide search engine crawlers in discovering and indexing all pages.

Question 34: What HTML5 form attribute forces the user to fill in a field before the form can be submitted?

required (Correct answer)
mandatory
notnull
validate

Correct answer: required

The 'required' attribute triggers native browser-side validation, preventing form submission if the field is empty.

Question 35: Which SQL statement is used to retrieve data from a database?

INSERT
UPDATE
SELECT (Correct answer)
FETCH

Correct answer: SELECT

The SQL `SELECT` statement queries a database and returns a result set of matching rows.

Question 36: Which SQL clause is used to filter groups after a GROUP BY operation?

HAVING (Correct answer)
WHERE
AND
FILTER

Correct answer: HAVING

The `HAVING` clause filters the result of GROUP BY aggregations, similar to how WHERE filters individual rows.

Question 37: What does authentication verify in information security?

The encryption strength of a message
The integrity of a database backup
The availability of a web server
The identity of a user or system trying to access a resource (Correct answer)

Correct answer: The identity of a user or system trying to access a resource

Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.

Question 38: What is the purpose of version control systems like Git in web development?

Automatically optimize CSS files
Monitor website traffic
Generate server-side APIs
Track changes to code over time, enabling collaboration and rollback to previous versions (Correct answer)

Correct answer: Track changes to code over time, enabling collaboration and rollback to previous versions

Version control systems like Git record every change to code, allowing teams to collaborate, review history, and revert to earlier states.

Question 39: What does a 404 HTTP status code mean?

The server is temporarily unavailable
The request was successful
The client is unauthorized to access the resource
The requested resource was not found on the server (Correct answer)

Correct answer: The requested resource was not found on the server

A 404 Not Found error means the server could not locate the resource at the requested URL, often due to a broken or outdated link.

Question 40: Which type of e-commerce transaction occurs between two private individuals, such as on eBay or Craigslist?

B2C
C2C (Correct answer)
G2C
B2B

Correct answer: C2C

C2C (Consumer-to-Consumer) commerce involves transactions between private individuals, often facilitated by a third-party platform.

Question 41: Which option best encapsulates the differences between a mobile app and a mobile Web site since the introduction of HTML5?

A mobile app is faster because it does not necessarily use the browser. (Correct answer)
A mobile Web site cannot create an immersive experience for users.
A mobile app can be used on any operating system.
A mobile Web site is faster because it uses the mobile phone’s default browser.

Correct answer: A mobile app is faster because it does not necessarily use the browser.

Mobile apps are typically compiled code that runs natively on the device's operating system, allowing them to leverage device hardware and resources directly. This often results in better performance and a more responsive user experience compared to mobile websites, which run within a browser and are limited by browser rendering and network speed. While HTML5 has improved mobile web capabilities, native apps still often offer superior speed and integration.

Question 42: What is affiliate marketing?

Marketing limited to social media platforms
Marketing done by company employees only
A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant (Correct answer)
A type of email spam campaign

Correct answer: A performance-based model where affiliates earn commissions for driving traffic or sales to a merchant

Affiliate marketing pays third-party publishers a commission for generating traffic or sales for a merchant's products via tracked links.

Question 43: What is a digital certificate primarily used for in e-commerce?

Track website visitor behavior
Manage email subscriptions
Compress web pages
Authenticate identities and enable encrypted communications (Correct answer)

Correct answer: Authenticate identities and enable encrypted communications

A digital certificate binds a public key to an entity's identity, enabling SSL/TLS encryption and verifying website authenticity.

Question 44: Which method of the String object would you employ for composing an intricate mathematical formula with powers in JavaScript, such as "E=MC2"?

anchor()
sup() (Correct answer)
fixed()
small()

Correct answer: sup()

The `sup()` method of the String object in JavaScript is used to display a string as a superscript. For an intricate mathematical formula like 'E=MC2', `sup()` would be applied to the '2' to render it as an exponent, correctly formatting the expression. This method wraps the string in `<sup>` HTML tags, making it appear as a superscript.

Question 45: Which HTML5 element is used to define the main content area of a document, excluding headers, footers, and navigation?

<body>
<content>
<main> (Correct answer)
<article>

Correct answer: <main>

The <main> element identifies the dominant content of the document body and should appear only once per page.

Question 46: Which HTML5 element represents a self-contained composition that could be independently distributed, such as a blog post?

<article> (Correct answer)
<aside>
<main>
<section>

Correct answer: <article>

The <article> element represents content that is self-contained and could stand alone, such as a news article, blog post, or forum entry.

Question 47: What phrase describes the method of moving variables from one data type to another in JavaScript?

Concatenating
Parsing
Casting (Correct answer)
Initializing

Correct answer: Casting

In JavaScript, 'casting' (or type coercion) refers to the process of converting a variable from one data type to another. This can be explicit, where a developer intentionally converts a type (e.g., `Number('123')`), or implicit, where JavaScript automatically converts types during operations (e.g., `'5' + 2` results in `'52'`). It's a fundamental concept for manipulating data types.

Question 48: Which OSI layer is responsible for end-to-end error detection and flow control between two hosts?

Network layer
Session layer
Data Link layer
Transport layer (Correct answer)

Correct answer: Transport layer

The Transport layer (Layer 4) handles end-to-end error detection, flow control, and reliable delivery between hosts.

Question 49: Which HTML5 input type provides built-in validation for email address format?

type="text"
type="mail"
type="address"
type="email" (Correct answer)

Correct answer: type="email"

type="email" instructs the browser to validate that the entered value matches an email address format before form submission.

Question 50: What is SQL injection?

An attack that inserts malicious SQL code into input fields to manipulate a database (Correct answer)
A method of speeding up SQL queries
A type of stored procedure
A database backup technique

Correct answer: An attack that inserts malicious SQL code into input fields to manipulate a database

SQL injection exploits insufficient input validation by inserting malicious SQL statements into fields, potentially exposing or corrupting database data.

Question 51: Which HTML attribute specifies that a form field must be filled out before submitting the form?

notnull
required (Correct answer)
validate
mandatory

Correct answer: required

The `required` attribute on an input element triggers built-in browser validation, preventing form submission if the field is empty.

Question 52: Which business model describes a company selling products directly to consumers online?

B2B (Business-to-Business)
B2C (Business-to-Consumer) (Correct answer)
C2C (Consumer-to-Consumer)
B2G (Business-to-Government)

Correct answer: B2C (Business-to-Consumer)

B2C (Business-to-Consumer) is the model where businesses sell directly to individual end-user consumers via the internet.

Question 53: What is the purpose of the Spanning Tree Protocol (STP) in a switched network?

Prioritize voice traffic over data traffic
Assign IP addresses to network devices
Prevent routing loops by blocking redundant paths (Correct answer)
Encrypt traffic between switches

Correct answer: Prevent routing loops by blocking redundant paths

STP prevents Layer 2 switching loops by placing redundant switch ports in a blocking state, keeping one active path.

Question 54: What is the main advantage of using CSS Flexbox over traditional float-based layouts?

Automatic image compression
Better cross-browser font rendering
Faster page load times
Easier alignment and distribution of space among items in a container (Correct answer)

Correct answer: Easier alignment and distribution of space among items in a container

Flexbox was designed specifically to provide a more efficient way to lay out, align, and distribute space among items in a container.

Question 55: Which CSS display value causes an element to start on a new line and stretch the full available width?

flex
inline-block
block (Correct answer)
inline

Correct answer: block

A `block`-level element always starts on a new line and takes up the full width of its container.

CIW Certification Suite

CIW (Certified Internet Webmaster) certifications validate expertise across web design, internet business, site development, and web security. Exams are vendor-neutral, computer-based, and cover foundational to specialist-level web technology skills.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

ciwcertified.com — Exam format, passing score, time limit, test delivery, renewal, score release, score validity, retake policy, eligibility, fees · verified Oct 2026