021.3 Ethical Behavior (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst finds a document with the company's trade secrets on a public file-sharing site. What is the most ethical action?

   • AIgnore the document because it is publicly available.
   • BReport the exposure to the company's legal and security teams immediately.
   • CDownload the document and use it to improve the company's security.
   • DShare the document with a competitor to expose the company's weakness.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security consultant is a member of a professional association with a code of ethics. During a client engagement, the consultant discovers that the client's IT manager is using company resources for personal cryptocurrency mining. The consultant has signed a non-disclosure agreement with the client. What should the consultant do?

   • AInform the client's management about the discovery, respecting the NDA.
   • BReport the IT manager to the police immediately.
   • CPost an anonymous warning on a security forum to alert other clients.
   • DIgnore the discovery because it is not part of the consultant's scope.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security administrator accidentally deletes a critical firewall rule, causing a brief outage. The administrator's manager asks what happened. What is the most professional response?

   • ABlame a vendor's software update for the outage.
   • BAdmit the mistake, explain what happened, and outline steps to prevent recurrence.
   • CSay the outage was caused by a power failure.
   • DMinimize the incident and avoid discussing details.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which behavior best demonstrates professional conduct in a security role?

   • AHiding a security breach to avoid negative attention
   • BAdmitting a mistake and taking responsibility for the consequences
   • CUsing company resources for personal projects without permission
   • DTaking credit for a colleague's work to advance your career
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A developer at a software company copies code from an open-source project with a restrictive license into a proprietary product without attribution. What is the primary ethical and legal issue?

   • AThe developer is acting ethically because open-source code is free to use.
   • BThe developer is violating intellectual property rights and may face legal action.
   • CThe developer is being efficient by reusing existing code.
   • DThe developer is improving the product's quality by using proven code.
   Reveal Solution Discussion Select an answer first