Ethics and Information Security Quiz

What is the key difference between ethics and laws?

• A. Ethics are enforced by courts, laws are not

• B. Laws are personal beliefs, ethics are national rules

• C. Laws are enforced by governing authorities, ethics are not

• D. Ethics require compliance, laws do not

What does 'due care' require from an organization?

• A. Writing security software

• B. Protecting property by any means

• C. Ensuring employees understand and follow policies

• D. Performing regular hardware upgrades

What is 'due diligence' in information security?

• A. Assigning security tasks randomly

• B. Making a continuous, valid effort to protect others

• C. Hiring external consultants annually

• D. Encrypting all data at rest

What is the purpose of security policies in organizations?

• A. Provide room for personal interpretation

• B. Encourage innovation

• C. Define acceptable and unacceptable behaviors

• D. Reduce company spending

Which of the following is NOT required to make a policy enforceable?

• A. Dissemination

• B. Ignorance

• C. Comprehension

• D. Uniform enforcement

Which organization developed the 'Ten Commandments of Computer Ethics'?

• A. ACM

• B. IEEE

• C. Computer Ethics Institute

• D. ISACA

The ACS Code of Ethics places which principle above all others?

• A. Professionalism

• B. Public Interest

• C. Honesty

• D. Competence

What does the ACM Code of Ethics emphasize in Section 1?

• A. Disciplinary actions

• B. General ethical principles

• C. Certification exams

• D. Financial conduct

According to the IEEE Code of Ethics, professionals must avoid:

• A. Long work hours

• B. Technical training

• C. Conflicts of interest

• D. Teamwork

What ethical principle is violated when a hacker enters a private system without causing harm?

• A. Beneficence

• B. Privacy rights and property rights

• C. Justice

• D. Fair use