1.1 - Understand, Adhere to, and Promote Professional Ethics CISSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security team wants to promote ethical behavior across the organization. Which approach is most effective for embedding ethics into daily security practice?

   • ARely on the security team to model ethical behavior without any formal training or communication.
   • BIntegrate ethics scenarios into existing security awareness training and discuss them in team meetings.
   • CPost the organizational code of ethics on the company intranet and require a one-time acknowledgment.
   • DCreate a reward program that gives bonuses to employees who report ethical violations.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security manager wants to promote ethical behavior among the security team. Which action best demonstrates leading by example?

   • AThe manager consistently follows security policies and procedures, even when they are inconvenient.
   • BThe manager delegates all policy compliance checks to the team to avoid personal involvement.
   • CThe manager only enforces policies when senior management is watching.
   • DThe manager occasionally bypasses policies to get the job done faster, but explains why.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a typical component of an organizational code of ethics?

   • AA specification of the organization's technical architecture
   • BA detailed list of employee salaries
   • CA statement of core values and principles
   • DA description of the company's marketing strategy
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security engineer discovers that a colleague has been using a vulnerability scanner to probe systems outside the company's authorized scope, claiming it is for research. The engineer is an ISC2 member. What is the most appropriate immediate action?

   • AJoin the colleague in the research to ensure the activity is done safely.
   • BConfront the colleague privately and ask them to stop the unauthorized activity.
   • CReport the activity to the security manager or other appropriate internal authority.
   • DIgnore the activity because the colleague is a trusted researcher and likely has good intentions.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team wants to create a culture of ethical behavior. Which initiative is most likely to be effective?

   • ACreate a confidential hotline for reporting violations, but do not provide any training on ethical decision-making.
   • BDistribute a one-page summary of the code of ethics and ask employees to sign it once.
   • CReward employees who report violations with public recognition and bonuses.
   • DHold regular, interactive ethics workshops where employees discuss real-world scenarios and dilemmas.
   Reveal Solution Discussion Select an answer first