1.1 - Comply with Codes of Ethics SSCP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security manager is responsible for enforcing the organization's code of ethics. An employee reports that a colleague is using company resources for personal gain. The manager investigates and finds that the colleague is running a side business using company servers. The colleague is a top performer and the manager is concerned about losing them. What should the manager do?

   • AGive the colleague a warning and allow them to continue if they stop using company resources
   • BTransfer the colleague to a different department to avoid the conflict
   • CIgnore the issue to avoid losing a top performer
   • DEnforce the code of ethics by taking disciplinary action against the colleague
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization's code of ethics requires employees to protect confidential information. A security analyst discovers that a colleague has been sharing customer data with a third party without authorization. What should the analyst do first?

   • AConfront the colleague directly and demand they stop
   • BShare the information with other colleagues to warn them
   • CReport the incident to the appropriate internal authority, such as a manager or compliance officer
   • DIgnore the incident because it is not the analyst's responsibility
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a typical component of an organizational code of ethics?

   • AA statement of the organization's core values and principles.
   • BA detailed list of all employee salaries and benefits.
   • CA technical manual for configuring network firewalls.
   • DA marketing plan for promoting the organization's products.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of an organizational code of ethics?

   • ATo replace the need for external audits and certifications.
   • BTo maximize the organization's profitability and market share.
   • CTo provide a framework for ethical decision-making and guide employee behavior.
   • DTo ensure the organization complies with all legal regulations.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security professional is asked to sign a non-disclosure agreement (NDA) that would prevent them from reporting security vulnerabilities to the public. The professional believes that some vulnerabilities could affect public safety. According to the ISC2 Code of Ethics, what should the professional do?

   • ARefuse to sign the NDA if it conflicts with the duty to protect public safety
   • BSign the NDA and hope that no public safety issues arise
   • CSign the NDA and comply with its terms
   • DSign the NDA but report vulnerabilities anonymously
   Reveal Solution Discussion Select an answer first