1.4 - Understand ISC2 Code of Ethics CC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A cybersecurity manager is responsible for hiring a new team member. A candidate who is a close friend of the manager applies for the position. The manager believes the friend is qualified but also knows there are other equally qualified candidates. What should the manager do, considering the ISC2 Code of Ethics?

   • ARecommend the friend to HR but let HR make the final decision.
   • BHire the friend but disclose the relationship to the team.
   • CHire the friend because they are qualified and the manager knows them well.
   • DRecuse themselves from the hiring decision and let another manager handle the process.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which canon of the ISC2 Code of Ethics requires cybersecurity professionals to act with integrity and within the law?

   • AProvide diligent and competent service to principals
   • BAct honorably, honestly, justly, responsibly, and legally
   • CProtect society, the common good, and necessary public trust
   • DAdvance and protect the profession
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst discovers that a colleague has been using their administrative access to view personal emails of employees without authorization. The analyst reports this to their manager, but the manager dismisses it as a minor issue. What should the analyst do next, considering the ISC2 Code of Ethics?

   • AReport the incident to a local news outlet to expose the organization's failure to act.
   • BEscalate the issue to the appropriate internal authority, such as HR or the compliance team, and document the report.
   • CConfront the colleague directly and demand they stop, without involving anyone else.
   • DIgnore the issue since the manager has decided it is not important, and focus on other tasks.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security administrator discovers that a vendor has been given access to the company's network without a proper security review. The administrator is concerned about the potential risk. What should the administrator do, considering the ISC2 Code of Ethics?

   • AConfront the vendor directly and demand they leave the network.
   • BImmediately revoke the vendor's access and inform the vendor.
   • CReport the concern to the appropriate manager or security team and recommend a security review.
   • DIgnore the issue because the vendor was likely approved by someone else.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security consultant is hired to perform a penetration test for a client. During the test, the consultant discovers that the client's employees are using a shared password for all administrative accounts. The consultant reports this to the client, but the client decides not to fix it due to cost. What should the consultant do, considering the ISC2 Code of Ethics?

   • ADocument the finding and the client's decision, and consider reporting the risk to relevant authorities if it poses a significant threat to public safety.
   • BPublicly disclose the vulnerability to pressure the client into fixing it.
   • CRefuse to work with the client again until they fix the issue.
   • DRespect the client's decision and do nothing further.
   Reveal Solution Discussion Select an answer first