What is the main purpose of the Computer Fraud and Abuse Act (CFAA) in the United States?

To protect consumers from unfair business practices

To regulate the collection of personal data by private companies

To establish data protection standards for healthcare information

To criminalize unauthorized access to computer systems and data

Which scenario best exemplifies ethical hacking?

An individual discovers a vulnerability and exploits it to access confidential data without informing the owner

A security consultant tests a company's network after signing a contract that grants permission and defines the scope

A former employee uses old credentials to check if the company's security is still effective

A student hacks into a school's system to prove a point about security weaknesses

A security consultant is offered a free vacation by a vendor whose products the consultant evaluates. The consultant's employer has a strict policy against accepting gifts from vendors. What should the consultant do?

Accept the vacation because it is a gift, not a payment.

Accept the vacation and evaluate the vendor's products favorably in return.

Accept the vacation but disclose it to the employer after the trip.

Decline the vacation and inform the vendor of the company's policy.

A company wants to use customer data for a new purpose that was not disclosed in its privacy policy. What is the most ethical approach?

Obtain consent from customers before using the data for the new purpose.

Anonymize the data and use it without consent.

Use the data for the new purpose because it benefits the company.

Update the privacy policy and continue using the data.

What is the primary factor that distinguishes ethical hacking from malicious hacking?

The use of advanced technical tools and techniques

The level of expertise of the individual performing the test

The intent and authorization behind the activity

The type of system being tested

LPI Security Essentials

Domain 1Objective 3

021.3 Ethical Behavior (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 3)

Part of the 021 Security Concepts domain, which makes up ~15% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
What is the main purpose of the Computer Fraud and Abuse Act (CFAA) in the United States?
Select an answer first
12foundation · easy
Which scenario best exemplifies ethical hacking?
Select an answer first
13application · medium
A security consultant is offered a free vacation by a vendor whose products the consultant evaluates. The consultant's employer has a strict policy against accepting gifts from vendors. What should the consultant do?
Select an answer first
14application · medium
A company wants to use customer data for a new purpose that was not disclosed in its privacy policy. What is the most ethical approach?
Select an answer first
15foundation · easy
What is the primary factor that distinguishes ethical hacking from malicious hacking?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.