1.4 - Understand ISC2 Code of Ethics CC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A cybersecurity professional is asked to testify in a court case about a security breach they investigated. The professional is asked by the defense attorney to only present evidence that is favorable to the defense. What should the professional do, considering the ISC2 Code of Ethics?

   • AAgree to present only favorable evidence to help the defense.
   • BRefuse to testify to avoid being involved in the case.
   • CPresent all relevant evidence, regardless of which side it favors.
   • DPresent only evidence that favors the prosecution to balance the defense's request.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A cybersecurity consultant is hired to review a client's security policies. During the review, the consultant finds that the client's policies are not compliant with industry regulations. The client asks the consultant to sign a statement saying the policies are compliant. What should the consultant do, considering the ISC2 Code of Ethics?

   • ASign the statement but add a note about the non-compliance issues.
   • BRefuse to sign and immediately report the client to regulators.
   • CSign the statement because the client is paying for the review.
   • DRefuse to sign the statement and explain the non-compliance issues to the client.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement best describes the structure of the ISC2 Code of Ethics?

   • AIt is a set of mandatory technical standards for all cybersecurity tools
   • BIt consists of a preamble, four canons, and additional guidance for professional conduct
   • CIt is a single, brief statement that all members must memorize and recite
   • DIt is a detailed legal document with specific penalties for each violation
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of the ISC2 Code of Ethics?

   • ATo define the legal penalties for cybercrime in various jurisdictions
   • BTo provide a legally binding contract that members must sign to avoid litigation
   • CTo list specific technical security controls that all members must implement
   • DTo establish a set of professional guidelines that promote trust, integrity, and responsible behavior in cybersecurity
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security engineer is asked by their supervisor to implement a backdoor in the company's authentication system to allow the supervisor to access accounts without logging. The engineer believes this is unethical and could be illegal. What should the engineer do according to the ISC2 Code of Ethics?

   • AQuit the job immediately without reporting the issue.
   • BRefuse to implement the backdoor and report the request to higher management or the appropriate authority.
   • CImplement the backdoor but document that it was done under duress.
   • DImplement the backdoor because the supervisor has authority over the system.
   Reveal Solution Discussion Select an answer first