A company's code of ethics states that employees should not accept gifts from vendors that could influence business decisions. A security manager receives a high-value gift from a vendor shortly before the vendor's contract is up for renewal. What should the security manager do?

Keep the gift because it is a personal matter

Keep the gift but disclose it to the supervisor

Return the gift and inform the vendor that it cannot be accepted

Donate the gift to charity and keep the receipt

A security professional is working for a government contractor. The professional discovers that a colleague is selling classified information to a foreign entity. The professional is bound by a confidentiality agreement with the government. According to the ISC2 Code of Ethics, what should the professional do?

Keep the information confidential to protect the colleague

Confront the colleague and ask them to stop

Resign from the position to avoid involvement

Report the colleague to the appropriate government authorities

An organization's code of ethics requires employees to avoid discrimination and harassment. A security team leader notices that a team member is making inappropriate comments about a colleague's background. What should the team leader do?

Address the behavior immediately and report it to HR

Transfer the team member to a different team

Ignore the comments to avoid conflict within the team

Ask the team member to stop but do not report it

An organization's code of ethics requires employees to maintain professional competence. A security administrator is assigned to manage a new type of firewall they have never used before. What should the administrator do?

Refuse to work with the new firewall until it is replaced with a familiar one

Learn on the job by configuring the firewall and troubleshooting issues

Seek training and certification on the new firewall before managing it

Delegate the task to a colleague who has experience with the firewall

A security consultant is hired to assess a company's network. During the assessment, the consultant finds evidence of illegal activity on the network. According to the ISC2 Code of Ethics, what should the consultant do?

Report the illegal activity to the appropriate authorities

Include the finding in the final report but do not report it to authorities

Discuss the finding with the client and let them decide what to do

Keep the information confidential to protect the client's reputation

Systems Security Certified Practitioner

Domain 1Objective 1

1.1 - Comply with Codes of Ethics SSCP Practice Questions (Page 4)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

2concepts

16%of the exam

Questions 16–20

16application · medium
A company's code of ethics states that employees should not accept gifts from vendors that could influence business decisions. A security manager receives a high-value gift from a vendor shortly before the vendor's contract is up for renewal. What should the security manager do?
Select an answer first
17expert · hard
A security professional is working for a government contractor. The professional discovers that a colleague is selling classified information to a foreign entity. The professional is bound by a confidentiality agreement with the government. According to the ISC2 Code of Ethics, what should the professional do?
Select an answer first
18application · medium
An organization's code of ethics requires employees to avoid discrimination and harassment. A security team leader notices that a team member is making inappropriate comments about a colleague's background. What should the team leader do?
Select an answer first
19application · medium
An organization's code of ethics requires employees to maintain professional competence. A security administrator is assigned to manage a new type of firewall they have never used before. What should the administrator do?
Select an answer first
20application · medium
A security consultant is hired to assess a company's network. During the assessment, the consultant finds evidence of illegal activity on the network. According to the ISC2 Code of Ethics, what should the consultant do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.