What is the ethical obligation of a security professional when collecting personal data?

To collect as much data as possible for future analysis

To collect only the data necessary for a specific, legitimate purpose

To share collected data with third parties without consent

To retain personal data indefinitely for security purposes

Which of the following is a common element found in professional codes of ethics for IT security?

A promise to share all discovered vulnerabilities with competitors

A mandate to use the most expensive security tools available

A commitment to act in the best interest of clients and the public

A requirement to report all security incidents to the media

Which law is primarily focused on protecting personal data of individuals in the European Union?

General Data Protection Regulation (GDPR)

Health Insurance Portability and Accountability Act (HIPAA)

Computer Fraud and Abuse Act (CFAA)

A security team discovers that a colleague has been selling customer data to a third party. The team has evidence but is unsure if the colleague is acting under management orders. What is the most appropriate action?

Report the evidence to the appropriate internal authority, such as legal or compliance.

Share the evidence with the media to expose the company.

Ignore the evidence because the colleague may have authorization.

Confront the colleague directly and ask for an explanation.

What is the best course of action when a security professional identifies a potential conflict of interest?

Resign from the job immediately

Use the conflict to gain a personal advantage

Ignore it and proceed with the task as planned

Disclose the conflict to the relevant stakeholders and recuse themselves if necessary

LPI Security Essentials

Domain 1Objective 3

021.3 Ethical Behavior (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 021 Security Concepts domain, which makes up ~15% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

Questions 6–10

6foundation · easy
What is the ethical obligation of a security professional when collecting personal data?
Select an answer first
7foundation · easy
Which of the following is a common element found in professional codes of ethics for IT security?
Select an answer first
8foundation · easy
Which law is primarily focused on protecting personal data of individuals in the European Union?
Select an answer first
9application · medium
A security team discovers that a colleague has been selling customer data to a third party. The team has evidence but is unsure if the colleague is acting under management orders. What is the most appropriate action?
Select an answer first
10foundation · easy
What is the best course of action when a security professional identifies a potential conflict of interest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.