Ethics, Law, and Information Security Worksheet

Which of the following best highlights three differences between good conduct and good ethics?

• Conduct is about actions; ethics are about values. Conduct is seen by others; ethics are internal. Conduct can vary; ethics are more consistent.

• Conduct is unethical; ethics are illegal. Conduct is internal; ethics are external. Ethics depend on popularity.

• Conduct and ethics are the same in all cases.

• Conduct is emotional; ethics are physical. Conduct affects law; ethics do not. Ethics are always visible.

How can the USA PATRIOT Act affect businesses using U.S.-based hosting services?

• It requires all foreign businesses to pay extra taxes to the U.S.

• It allows U.S. authorities to access data stored by U.S. companies, even if the data belongs to foreign clients.

• It bans non-U.S. companies from using American cloud services.

• It ensures data hosted in the U.S. is protected from any government access.

Which of the following is not one of the 10 basic principles of the CSA Code for the protection of personal information?

• A. Accountability

• B. Consent

• C. Unlimited Collection

• D. Identifying Purposes

Effective ways to add character diversity to a password include which of the following?

• Using a mix of uppercase, lowercase, numbers, and symbols

• Repeating the same character multiple times

• Using only lowercase letters

• Using only numbers

Which of the following are good practices for creating a strong password?

• Use a mix of uppercase and lowercase letters

• Include numbers and special characters (e.g., @, #, !)

• Repeat the same word multiple times

• Replace some letters with symbols (e.g., “a” with “@”)

Which of the following are acceptable forms of preventing hacking?

• Double encryption

• Prevent root access

• Think like a thief

• Trick your users to give info

• Run server processes such as web or database as root

The United States does not have any privacy legislation in place.

• True

• False

Why is it better to use paper mock-ups instead of a web-based interface early in the design process?

• They are quicker and cheaper to create and modify

• Users can focus on functionality instead of colors or design details

• Paper mock-ups are easier to recycle

• They allow for early feedback without needing technical skills

Which legislation or agreement permits the transfer of personal data from Europe to the United States?

• Safe Harbour

• PIPEDA

• USA PATRIOT Act

• COPPA

• ECHR

What was the earliest form of encryption believed to be, and how did it work?

• The Caesar cipher, which shifted letters by a fixed number of places in the alphabet

• The Enigma machine, which used complex mechanical settings to scramble messages

• Morse code, which used dots and dashes to encode messages

• Public key cryptography, which used paired keys for encryption and decryption