1.4 - Understand ISC2 Code of Ethics CC Practice Questions (Page 5)

Questions 21–23

1. 21expert · hard

   A security analyst is asked by their supervisor to provide a list of employees' personal data for a marketing campaign. The analyst knows that this data was collected for security purposes only and that using it for marketing would violate the company's privacy policy. What should the analyst do, considering the ISC2 Code of Ethics?

   • AProvide the data because the supervisor has the authority to request it.
   • BProvide the data but anonymize it to reduce the risk.
   • CRefuse to provide the data and explain the privacy policy violation to the supervisor.
   • DReport the request to the legal department without discussing it with the supervisor.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A cybersecurity analyst is asked to provide a reference for a former colleague. The analyst knows that the colleague was terminated for a serious security breach but also believes the colleague has since improved. What should the analyst do, considering the ISC2 Code of Ethics?

   • ARefuse to provide a reference at all to avoid any potential conflict.
   • BProvide a negative reference to warn the prospective employer about the colleague's past.
   • CProvide a reference that honestly discusses the colleague's strengths and the circumstances of the termination.
   • DProvide a positive reference without mentioning the termination to help the colleague.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   A cybersecurity professional discovers that their employer is storing customer data in a way that violates data protection regulations. According to the ISC2 Code of Ethics, what should the professional do?

   • ADelete the data to avoid any legal issues
   • BInform the employer and work to correct the issue, escalating if necessary
   • CReport the violation to the appropriate authorities immediately without informing the employer
   • DIgnore the issue because it is the employer's responsibility
   Reveal Solution Discussion Select an answer first