1.4 - Understand ISC2 Code of Ethics CC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is one of the four canons of the ISC2 Code of Ethics?

   • AProtect society, the common good, and necessary public trust
   • BMaximize personal financial gain from professional activities
   • CEnsure all systems are 100% secure at all times
   • DPrioritize employer requests over legal requirements
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a disciplinary action that ISC2 may take against a member who violates the Code of Ethics?

   • ABanning the member from using social media
   • BRequiring the member to complete additional training
   • CIssuing a formal censure
   • DSuspending the member's certification for a period of time
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An ISC2 certified professional is found to have intentionally misrepresented their qualifications on a resume to obtain a security position. According to the ISC2 Code of Ethics, what is the most likely consequence for this violation?

   • ASuspension of certification for a specified period.
   • BA formal warning and mandatory ethics training.
   • CRevocation of certification and possible legal action.
   • DNo consequence if the employer does not file a complaint.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security consultant is hired by a company to conduct a security assessment. During the assessment, the consultant finds that the company is using pirated software. The company's management asks the consultant to keep this finding confidential and not include it in the report. What should the consultant do, considering the ISC2 Code of Ethics?

   • AInclude the finding in the report and recommend the company address the issue.
   • BAgree to keep the finding confidential to maintain a good relationship with the client.
   • CRefuse to complete the assessment until the client removes the pirated software.
   • DReport the finding to the software vendor without the client's consent.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A cybersecurity professional is working on a project that involves implementing a new authentication system. The professional discovers that the system has a flaw that could allow unauthorized access, but fixing it would delay the project and increase costs. The project manager insists on launching on time. What should the professional do, considering the ISC2 Code of Ethics?

   • ALaunch the system but document the flaw for future reference.
   • BAsk the project manager to sign a waiver accepting the risk.
   • CLaunch the system on time and fix the flaw later.
   • DRefuse to launch until the flaw is fixed, even if it means delaying the project.
   Reveal Solution Discussion Select an answer first