1.4 - Understand ISC2 Code of Ethics CC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a potential consequence for an ISC2 member who violates the Code of Ethics?

   • ARevocation of the member's certification
   • BImmediate imprisonment by a court of law
   • CA fine imposed by ISC2
   • DA public apology published in a cybersecurity journal
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security engineer discovers that a colleague has been selling company data to a third party. The engineer reports the incident to their supervisor, but the supervisor is involved in the scheme. What should the engineer do, considering the ISC2 Code of Ethics?

   • AReport the incident to law enforcement or a higher authority within the company, such as the legal department.
   • BQuit the job and find a new position without reporting the incident.
   • CConfront the colleague and supervisor directly and demand they stop.
   • DKeep quiet to avoid retaliation from the supervisor.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A security consultant is asked by a client to provide a vulnerability assessment report that downplays the severity of a critical risk. According to the ISC2 Code of Ethics, what should the consultant do?

   • AAlter the report but keep a copy of the original for personal records
   • BComply with the client's request to maintain a good relationship
   • CRefuse to alter the report and present the findings accurately
   • DResign from the engagement immediately without explanation
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst is asked by a friend who works at the same company to look up the friend's own personnel file to check for errors. The analyst has access to the HR system but is not authorized to view personnel files. What should the analyst do, considering the ISC2 Code of Ethics?

   • AAccess the file because the friend is the subject of the file and has a right to see it.
   • BRefuse to access the file and advise the friend to request the information through proper HR channels.
   • CAccess the file but only tell the friend the information they need.
   • DAsk the friend to log in with their own credentials to view the file.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is working on a project that involves collecting data from users. The analyst discovers that the data collection is more extensive than what was disclosed to users in the privacy policy. What should the analyst do, considering the ISC2 Code of Ethics?

   • AIgnore the issue because it is a common practice in the industry.
   • BReport the discrepancy to the appropriate manager or legal team and recommend updating the privacy policy or limiting data collection.
   • CStop the project immediately and delete all collected data.
   • DContinue with the project because the data is needed for the business.
   Reveal Solution Discussion Select an answer first