QUESTION 22
Employee A works as a developer for a software company. Their sibling is also a developer at a competitor company. Both companies are working on a similar application. The sibling’s company struggles to get a feature to work, so the sibling copies the source code for the relevant sections of the application from Employee A’s laptop after it was left unattended.
How should this behavior be classified?

QUESTION 23
A customer places an order for a product on an e*commerce site after reviewing the quantity and pricing on the online form. The customer then receives an email confirmation that displays different pricing than the order form. The customer reports the discrepancy to customer service.
Which security practice is this customer addressing?

QUESTION 24
A consulting company employs H-1B workers. Even though companies applying for H*1B visas must offer a wage that is at least 95% of the average salary for the occupation, a close review of salarieswithin the consulting firm suggests that its H-1B workers are often paid 20% less on average than those with similar skill sets.
Which loophole is the company using to avoid paying H-1B workers a fair wage?

QUESTION 25
A credit reporting agency collects personally identifiable information (Pll) from customers. The agency appoints a data protection officer (DPO), who is responsible for overseeing the agency’s data protection strategy and enforcing data compliance requirements.
Which legislation should the DPO use as the basis for governing the collection and disclosure of Pll?

QUESTION 26
What is the unintended source of bias in artificial intelligence (Al) algorithms?

QUESTION 27
An incident handler discovers an unauthorized change in the security key vault’s database file, which caused a disclosure of confidential information. Which ethical issue does this incident pose?

QUESTION 28
A robotics company engages an IT firm to deliver a marketing software solution. During the project, the robotics company asks for additional features that were not in the initial contract. The IT firm’s project leader is unsure whether it can deliver these features but verbally agrees to the scope change. On delivery, the robotics company notes that several of the additional features are not included and that because of this, the solution is not compatible with certain legacy systems the company did not initially disclose.
Which factor might have mitigated the problem if the IT firm’s project leader had abided by a professional code of ethics?

QUESTION 29
Which act prohibits U.S. government agencies from concealing the existence of personal data record-keeping systems?

QUESTION 30
A group of hackers manipulated data to disable the national energy infrastructure for its political goals. Which type of attack did the group employ?

QUESTION 31
An insurance company develops an artificial intelligence (Al) system to manage claims automatically.
Although this technology benefits most customers, people from neighborhoods associated with a low socioeconomic status find it harder to get their claims approved. The company decides to keep using the system.
Which ethical theory justifies the company to come to this decision?

QUESTION 32
A customer places an order for a product on an e*commerce site after reviewing the quantity and pricing on the online form. The customer then receives an email confirmation that displays different pricing than the order form. The customer reports the discrepancy to customer service.
Which security practice is this customer addressing?

QUESTION 33
A company has used Its credit approval system for a long time. A risk evaluation director initiates an update of the data model to make sure it meets the highest ethical standards. Which Software Engineering Code of Ethics and Professional Practice principle does the director’s action represent?

QUESTION 34
During an investigation into a bank robbery, the Federal Bureau of Investigation (FBI) wants to monitor the telephone calls of identified suspects in the case for a two-week period. Due to the short time frame of the investigation, the FBI does not have time to pursue judicial authorization and get a warrant for surveillance.
Which type of telephone calls is legal for the FBI to monitor under the Foreign Intelligence Surveillance Act (FlSA). given the time frame of the investigation?

QUESTION 35
A company struggles to maintain project schedules with its current resource capacity. With a new set of corporate goals and restrictions on full-time hires, the company is considering adding contingent workers to help fill the gap.
What is a disadvantage of using contingent workers to support the company’s goals?

QUESTION 36
An organization is implementing a new computerized manufacturing system. The organization is concerned about proving the level of quality based on standards related to the system and associated processes.
Which International Organization for Standardization (ISO) standard certification should the organization seek to achieve this specific goal?

QUESTION 37
An engineer is working on a project to manufacture radar processing equipment for the U.S. military. As part of the project contract, all devices must be new. The engineer discovers that the manufacturer has a policy of using refurbished parts. The engineer speaks to their manager about it and is ignored.
What should this engineer do?

QUESTION 38
An organization collects data in aggregate format about its employees to improve workflow. Managers at the organization must ensure that the data collected is for business purposes only. Which data collection method should the organization implement?

QUESTION 39
A bank customer recently received a mailer from a third party affiliated with the customer’s bank. The customer is concerned because the mailer includes information about the customer’s remaining mortgage amount.
What is a rule or provision of the Gramm-Leach-Bliley Act (GLBA) that provides a process for the customer to control this type of information?