Free WGU (QCO1) Ethics In Technology Exam Dumps May 2026

Confidentiality ensures that only authorized personnel have access to sensitive information.

Why Confidentiality Was Violated?

Payroll information is sensitive and should be accessible only to authorized employees.

The erroneous access granted to new hires means private financial information is at risk.

Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.

Why Not the Other Options?

A . Availability -- Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.

B . Accessibility -- Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.

C . Integrity -- Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.

Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.

Reference in Ethics in Technology:

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

ISO/IEC 27001: Information Security Management Systems.

Doxing (or doxxing) refers to maliciously gathering and publishing personal information online without consent, often to harass, threaten, or retaliate against someone. In this scenario, the hacker stole an employee's health records and posted them online as revenge, which clearly constitutes doxing.

Relevant Ethical Reference in Technology:

Privacy Rights & Data Protection (HIPAA, GDPR, CCPA) -- Unauthorized disclosure of health records violates legal and ethical privacy standards.

Cyber Ethics & Harassment (ACM & IEEE Codes of Ethics) -- Doxing is considered a cybercrime and an unethical digital practice.

Cybersecurity & Retaliatory Attacks -- Ethical hacking principles condemn doxing as a form of online harassment.

Deontological & Virtue Ethics -- Publishing private information violates personal dignity and trust, making it ethically unacceptable.

Thus, the correct answer is B. Doxing, as the hacker exposed private health records online for revenge.

The Gramm-Leach-Bliley Act (GLBA) is a U.S. federal law that governs the privacy and security of consumer financial information. It contains three key rules:

Financial Privacy Rule -- Regulates how financial institutions collect and disclose personal financial information.

Safeguards Rule -- Requires financial institutions to implement security programs to protect consumer data.

Pretexting Protection Rule -- Prohibits deceptive attempts to obtain personal financial information.

In this case, the Financial Privacy Rule is relevant because it provides consumers with a way to control how their financial data is shared. This rule:

Requires financial institutions to provide privacy notices detailing how they collect, use, and share customer information.

Gives customers the right to opt-out of sharing certain types of financial information with third parties.

Since the customer is concerned about their mortgage details being shared, they can use the Financial Privacy Rule to control such disclosures.

Why Not the Other Options?

B . Pretexting -- Involves identity theft or fraudulent attempts to access financial data, which is not relevant here.

C . Consumer Protection -- A broad concept that does not specifically address financial data privacy.

D . Safeguards -- Focuses on securing customer data from breaches, not on controlling data sharing.

Thus, the correct answer is A. Financial privacy as it directly addresses the customer's concern.

Reference in Ethics in Technology:

Gramm-Leach-Bliley Act (1999), 15 U.S.C. 6801-6809.

Federal Trade Commission (FTC) Guide to the GLBA Financial Privacy Rule.

Solove, D. J. (2020). The Privacy Law Fundamentals. IAPP.