Ethics-In-Technology Exam Questions & Answers

The unauthorized change in the security key vault's database led to the disclosure of confidential information, which directly impacts privacy. Privacy concerns the protection of personal and sensitive information from unauthorized access, use, or exposure.

When confidential data is leaked, it violates fundamental principles of data privacy and security, raising ethical issues about how sensitive information is managed and protected.

Relevant Ethical Reference in Technology:

Privacy Ethics (Warren & Brandeis, 1890) -- Defined privacy as 'the right to be let alone.'

Data Protection Regulations -- GDPR (Europe), CCPA (California), and HIPAA (for health data) enforce ethical handling of personal information.

Confidentiality Principle in Cybersecurity -- Ensuring only authorized access to sensitive information aligns with professional ethical standards (e.g., ACM Code of Ethics, IEEE Ethics Code).

Ethical Hacking & Incident Handling -- Ethical frameworks emphasize preventing breaches that compromise privacy.

Thus, this incident primarily raises concerns about privacy, making option B the correct answer.

Consumer profiling is the practice of collecting and analyzing consumer data---including demographic, geographic, and behavioral attributes---to optimize sales strategies, enhance marketing efforts, and personalize customer experiences.

In this scenario, the organization gathers various types of customer data to improve its sales processes, which is a clear example of consumer profiling rather than surveillance or workplace monitoring.

Relevant Ethical Reference in Technology:

Privacy and Data Ethics (GDPR, CCPA) -- Consumer profiling raises ethical concerns about informed consent, transparency, and data protection.

Big Data Ethics (Tene & Polonetsky, 2012) -- Ethical consumer profiling must ensure fair use, avoidance of bias, and non-discriminatory practices.

Utilitarian vs. Deontological Perspectives -- While profiling improves customer experiences, it must not violate privacy rights or enable unethical targeting.

ACM Code of Ethics -- Encourages responsible collection, use, and protection of consumer data.

Thus, since the company is gathering consumer data to optimize sales, the correct answer is D. Consumer profiling.

A social audit is the process of evaluating a company's ethical, social, and corporate responsibility performance. The executive team reviewed past ethical and social responsibility efforts, set new goals, and shared the results with employees and the board, which aligns directly with a social audit.

Relevant Ethical Reference in Technology:

Business Ethics and Corporate Accountability -- Companies must evaluate their social and ethical impact to maintain ethical leadership.

Ethical IT Management (ISO 26000 & CSR Frameworks) -- Businesses should regularly assess their ethical and social impact.

Transparency and Ethical Leadership -- Sharing findings with employees and stakeholders promotes a culture of accountability.

IT and Digital Ethics -- Ethical technology use involves regular review and reassessment of ethical commitments.

Since the company reviewed its ethical and social responsibility goals and communicated them, it completed a social audit (D is the correct answer).

The Gramm-Leach-Bliley Act (GLBA) is a U.S. federal law that governs the privacy and security of consumer financial information. It contains three key rules:

Financial Privacy Rule -- Regulates how financial institutions collect and disclose personal financial information.

Safeguards Rule -- Requires financial institutions to implement security programs to protect consumer data.

Pretexting Protection Rule -- Prohibits deceptive attempts to obtain personal financial information.

In this case, the Financial Privacy Rule is relevant because it provides consumers with a way to control how their financial data is shared. This rule:

Requires financial institutions to provide privacy notices detailing how they collect, use, and share customer information.

Gives customers the right to opt-out of sharing certain types of financial information with third parties.

Since the customer is concerned about their mortgage details being shared, they can use the Financial Privacy Rule to control such disclosures.

Why Not the Other Options?

B . Pretexting -- Involves identity theft or fraudulent attempts to access financial data, which is not relevant here.

C . Consumer Protection -- A broad concept that does not specifically address financial data privacy.

D . Safeguards -- Focuses on securing customer data from breaches, not on controlling data sharing.

Thus, the correct answer is A. Financial privacy as it directly addresses the customer's concern.

Reference in Ethics in Technology:

Gramm-Leach-Bliley Act (1999), 15 U.S.C. 6801-6809.

Federal Trade Commission (FTC) Guide to the GLBA Financial Privacy Rule.

Solove, D. J. (2020). The Privacy Law Fundamentals. IAPP.

Adherence to a professional code of ethics ensures that individuals, their profession, and society benefit from ethical consistency and industry best practices.

1. Standardized Business Practices:

Ethical codes establish clear guidelines for professional conduct.

They promote fairness, transparency, and accountability in business.

2. Consistent Decision-Making:

A well-defined ethical framework helps professionals make fair and ethical choices in various situations.

Ensures uniform application of ethical principles across different cases.

Why Not the Other Options?

C . Assured Employer Integrity: Ethics applies to individual conduct rather than guaranteeing an employer's behavior.