A security analyst discovers a critical vulnerability in the company's customer portal. The analyst has permission from the CISO to test the portal and finds a way to extract customer data. What is the most ethical next step?

Publish the vulnerability details on a public forum to pressure the company to act quickly.

Sell the vulnerability information to a third-party broker for financial gain.

Immediately fix the vulnerability and keep it quiet to avoid panic.

Report the vulnerability to the CISO and follow the company's responsible disclosure policy.

Which practice best demonstrates ethical handling of personal data?

Sharing personal data with marketing partners to improve services

Encrypting personal data and limiting access to authorized personnel only

Storing personal data in plain text for easy access

Deleting personal data only when required by law

Why is it important for security professionals to respect intellectual property rights?

To prevent the use of open-source software

To allow copying of proprietary code for testing purposes

To ensure that all software is free to use

To avoid legal penalties and maintain professional integrity

A security researcher finds a vulnerability in a widely used open-source library. The researcher wants to follow responsible disclosure. What is the first step?

Contact the library maintainers privately with a detailed report.

Publish the vulnerability on a public mailing list to alert the community.

Wait for the library to be updated before doing anything.

Create a proof-of-concept exploit and share it on social media.

LPI Security Essentials

Domain 1Objective 3

021.3 Ethical Behavior (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 6)

Part of the 021 Security Concepts domain, which makes up ~15% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

Questions 26–29

26application · medium
A security analyst discovers a critical vulnerability in the company's customer portal. The analyst has permission from the CISO to test the portal and finds a way to extract customer data. What is the most ethical next step?
Select an answer first
27foundation · easy
Which practice best demonstrates ethical handling of personal data?
Select an answer first
28foundation · easy
Why is it important for security professionals to respect intellectual property rights?
Select an answer first
29application · medium
A security researcher finds a vulnerability in a widely used open-source library. The researcher wants to follow responsible disclosure. What is the first step?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.