WGU (QCO1) Ethics In Technology Exam Questions

The first step in ethical decision-making for IT professionals is to develop a problem statement, which involves clearly identifying and defining the ethical issue at hand. Before choosing solutions, an IT professional must fully understand the nature and scope of the problem.

Relevant Ethical Reference in Technology:

Ethical Decision-Making Models -- Models like the Kidder Ethical Decision-Making Model and Rest's Four-Component Model emphasize problem identification as the first step.

ACM Code of Ethics -- Encourages IT professionals to assess issues carefully before taking action.

Deontological Ethics (Kantian Ethics) -- Ethical decisions require a clear understanding of duty and obligations, which begins with defining the problem.

Business & IT Governance (COBIT Framework) -- Ethical IT management requires problem assessment before action.

Thus, the correct first step in ethical decision-making is B. Develop a problem statement

A white hat hacker is an ethical cybersecurity specialist hired to test an organization's security infrastructure and identify vulnerabilities before malicious attackers exploit them. Unlike black hat hackers (who engage in illegal activities), white hat hackers operate within legal and ethical boundaries to strengthen cybersecurity defenses.

In this scenario, the company hires a specialist to test security systems for vulnerabilities, which aligns with the role of a white hat hacker or ethical hacker.

Relevant Ethical Reference in Technology:

Ethical Hacking & Cybersecurity (CEH Certification) -- Ethical hackers conduct penetration testing to identify weaknesses.

Computer Fraud and Abuse Act (CFAA, 1986) -- Authorizes legal hacking for security testing purposes.

ACM & IEEE Ethical Standards -- Ethical hacking must follow responsible disclosure and legal guidelines.

Utilitarian Ethics (Greatest Good Principle) -- Ethical hacking prevents cyberattacks, benefiting organizations and society.

Thus, the correct answer is B. White hat hacker, as the specialist is legally testing security vulnerabilities.

The consultant was hired by the organization to test its cybersecurity and identify vulnerabilities. This is the role of a white hat hacker, also known as an ethical hacker.

Why White Hat Hacker?

White hat hackers conduct security assessments legally and ethically to help organizations strengthen their cyber defenses.

The consultant demonstrated SQL injection attacks in a controlled manner to expose weaknesses without malicious intent.

Ethical hacking is a recognized practice under cybersecurity frameworks like NIST and ISO 27001.

Why Not the Other Options?

A . Cybercriminal -- Engages in illegal hacking for personal or financial gain, whereas the consultant was hired to help the organization.

C . Cyberterrorist -- Motivated by political or ideological goals, not cybersecurity testing.

D . Black Hat Hacker -- Malicious hackers who exploit vulnerabilities for personal benefit, unlike ethical hackers.

Thus, the correct answer is B. White Hat Hacker, as the consultant was conducting authorized penetration testing.

Reference in Ethics in Technology:

CEH (Certified Ethical Hacker) Guidelines.

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

OWASP Top Ten Security Risks (2023).

Confidentiality ensures that only authorized personnel have access to sensitive information.

Why Confidentiality Was Violated?

Payroll information is sensitive and should be accessible only to authorized employees.

The erroneous access granted to new hires means private financial information is at risk.

Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.

Why Not the Other Options?

A . Availability -- Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.

B . Accessibility -- Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.

C . Integrity -- Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.

Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.

Reference in Ethics in Technology:

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

ISO/IEC 27001: Information Security Management Systems.

The unauthorized change in the security key vault's database led to the disclosure of confidential information, which directly impacts privacy. Privacy concerns the protection of personal and sensitive information from unauthorized access, use, or exposure.

When confidential data is leaked, it violates fundamental principles of data privacy and security, raising ethical issues about how sensitive information is managed and protected.

Relevant Ethical Reference in Technology:

Privacy Ethics (Warren & Brandeis, 1890) -- Defined privacy as 'the right to be let alone.'

Data Protection Regulations -- GDPR (Europe), CCPA (California), and HIPAA (for health data) enforce ethical handling of personal information.

Confidentiality Principle in Cybersecurity -- Ensuring only authorized access to sensitive information aligns with professional ethical standards (e.g., ACM Code of Ethics, IEEE Ethics Code).

Ethical Hacking & Incident Handling -- Ethical frameworks emphasize preventing breaches that compromise privacy.

Thus, this incident primarily raises concerns about privacy, making option B the correct answer.