Ethics-In-Technology Exam Questions and Answers

QUESTION: 9

To gain access to the electronic health record of a critically injured patient, an intensive care specialist decided to circumvent privacy policies to save the patient Which decision-ma king process guided the action of the specialist?

Unethical and legal
Unethical and illegal
Ethical and legal
Ethical and Illegal

Answer(s): D

Explanation:

The intensive care specialist acts with good intent (saving the patient's life) but violates privacy laws in the process.

Why is this ethical?

The doctor prioritizes the patient's life and well-being, which aligns with the ethical principle of beneficence (doing good).

The action follows utilitarian ethics, where breaking a rule is justified if it results in a greater moral good (saving a life).

Why is this illegal?

Bypassing privacy protections (e.g., HIPAA, GDPR) violates legal and regulatory standards concerning patient data.

Medical institutions require proper authorization to access patient records, even in emergencies.

Why Not the Other Options?

A . Unethical and Legal: The action is not unethical because the intention is to save a life.

B . Unethical and Illegal: The action is illegal but not unethical, as it prioritizes the patient's survival.

C . Ethical and Legal: While ethical, privacy laws are still broken, making it illegal.

Thus, the correct answer is D. Ethical and Illegal, as the doctor acts ethically but violates privacy laws in the process.

Reference in Ethics in Technology:

Beauchamp, T., & Childress, J. (2019). Principles of Biomedical Ethics. Oxford University Press.

General Data Protection Regulation (GDPR) (2018).

Health Insurance Portability and Accountability Act (HIPAA) (1996).

Tavani, H. T. (2016). Ethics and Technology: Controversies, Questions, and Strategies for Ethical Computing.

Reveal Solution Next Question

QUESTION: 10

An incident handler discovers an unauthorized change in the security key vault's database file, which caused a disclosure of confidential information.
Which ethical issue does this incident pose?

Property
Privacy
Access
Accuracy

Answer(s): B

Explanation:

The unauthorized change in the security key vault's database led to the disclosure of confidential information, which directly impacts privacy. Privacy concerns the protection of personal and sensitive information from unauthorized access, use, or exposure.

When confidential data is leaked, it violates fundamental principles of data privacy and security, raising ethical issues about how sensitive information is managed and protected.

Relevant Ethical Reference in Technology:

Privacy Ethics (Warren & Brandeis, 1890) Defined privacy as "the right to be let alone."

Data Protection Regulations GDPR (Europe), CCPA (California), and HIPAA (for health data) enforce ethical handling of personal information.

Confidentiality Principle in Cybersecurity Ensuring only authorized access to sensitive information aligns with professional ethical standards (e.g., ACM Code of Ethics, IEEE Ethics Code).

Ethical Hacking & Incident Handling Ethical frameworks emphasize preventing breaches that compromise privacy.

Thus, this incident primarily raises concerns about privacy, making option B the correct answer.

Reveal Solution Next Question

QUESTION: 11

What is the first step in ethical decision-making for an IT professional?

Choose an alternative
Develop a problem statement
Implement a solution
Identify alternatives

Answer(s): B

Explanation:

The first step in ethical decision-making for IT professionals is to develop a problem statement, which involves clearly identifying and defining the ethical issue at hand. Before choosing solutions, an IT professional must fully understand the nature and scope of the problem.

Relevant Ethical Reference in Technology:

Ethical Decision-Making Models Models like the Kidder Ethical Decision-Making Model and Rest's Four-Component Model emphasize problem identification as the first step.

ACM Code of Ethics Encourages IT professionals to assess issues carefully before taking action.

Deontological Ethics (Kantian Ethics) Ethical decisions require a clear understanding of duty and obligations, which begins with defining the problem.

Business & IT Governance (COBIT Framework) Ethical IT management requires problem assessment before action.

Thus, the correct first step in ethical decision-making is B. Develop a problem statement

Reveal Solution Next Question

QUESTION: 12

Which action can IT leaders take to encourage ethical behavior in their organizational culture?

Include traditional criteria in employee appraisals
Offer optional training for employees
Establish a chief executive officer (CEO) position
Conduct social audits and communicate goals

Answer(s): D

Explanation:

IT leaders can encourage ethical behavior by conducting social audits to evaluate the organization's ethical performance and then communicating clear goals for improvement.

A social audit is a structured evaluation of a company's ethical, social, and environmental impact, ensuring transparency and accountability. By sharing ethical goals, IT leaders create an organizational culture that values integrity and responsibility.

Relevant Ethical Reference in Technology:

Corporate Social Responsibility (CSR) Ethical leadership requires accountability in areas like employee welfare, environmental impact, and digital ethics.

Stakeholder Theory (Freeman, 1984) Ethical leadership involves transparency and engagement with employees, customers, and society.

IEEE and ACM Ethical Guidelines Highlight the importance of corporate ethics policies and performance reviews.

Ethical IT Governance (ITIL & ISO 26000) Emphasize corporate responsibility, ethical leadership, and transparency in IT decision-making.

Thus, conducting social audits and communicating ethical goals is the most effective way to promote an ethical culture.

Reveal Solution Next Question

QUESTION: 13

A software development company's executive management team recently met to review its progress on ethical and social responsibility goals. After the review, the team planned a new set of goals for the upcoming year. The team shared the results of this review and the new goats with the employees and the board of directors.

Which process did the team complete?

Establish code of ethics
Model high ethical standards
Deliver ethics training
Conduct social audit

Answer(s): D

Explanation:

A social audit is the process of evaluating a company's ethical, social, and corporate responsibility performance. The executive team reviewed past ethical and social responsibility efforts, set new goals, and shared the results with employees and the board, which aligns directly with a social audit.

Relevant Ethical Reference in Technology:

Business Ethics and Corporate Accountability Companies must evaluate their social and ethical impact to maintain ethical leadership.

Ethical IT Management (ISO 26000 & CSR Frameworks) Businesses should regularly assess their ethical and social impact.

Transparency and Ethical Leadership Sharing findings with employees and stakeholders promotes a culture of accountability.

IT and Digital Ethics Ethical technology use involves regular review and reassessment of ethical commitments.

Since the company reviewed its ethical and social responsibility goals and communicated them, it completed a social audit (D is the correct answer).

Reveal Solution Next Question

QUESTION: 14

A bank customer recently received a mailer from a third party affiliated with the customer's bank. The customer is concerned because the mailer includes information about the customer's remaining mortgage amount.

What is a rule or provision of the Gramm-Leach-Bliley Act (GLBA) that provides a process for the customer to control this type of information?

Financial privacy
Pretexting
Consumer protection
Safeguards

Answer(s): A

Explanation:

The Gramm-Leach-Bliley Act (GLBA) is a (U.S. )federal law that governs the privacy and security of consumer financial information. It contains three key rules:

Financial Privacy Rule Regulates how financial institutions collect and disclose personal financial information.

Safeguards Rule Requires financial institutions to implement security programs to protect consumer data.

Pretexting Protection Rule Prohibits deceptive attempts to obtain personal financial information.

In this case, the Financial Privacy Rule is relevant because it provides consumers with a way to control how their financial data is shared. This rule:

Requires financial institutions to provide privacy notices detailing how they collect, use, and share customer information.

Gives customers the right to opt-out of sharing certain types of financial information with third parties.

Since the customer is concerned about their mortgage details being shared, they can use the Financial Privacy Rule to control such disclosures.

Why Not the Other Options?

B . Pretexting Involves identity theft or fraudulent attempts to access financial data, which is not relevant here.

C . Consumer Protection A broad concept that does not specifically address financial data privacy.

D . Safeguards Focuses on securing customer data from breaches, not on controlling data sharing.

Thus, the correct answer is A. Financial privacy as it directly addresses the customer's concern.

Reference in Ethics in Technology:

Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809.

Federal Trade Commission (FTC) Guide to the GLBA Financial Privacy Rule.

Solove, D. J. (2020). The Privacy Law Fundamentals. IAPP.

Reveal Solution Next Question

QUESTION: 15

Which piece of legislation outlines who may access a person's credit data?

Fair and Accurate Credit Transactions Act
General Data Protection Regulation
European Union Data Protection Directive
Fair Credit Reporting Act

Answer(s): D

Explanation:

The Fair Credit Reporting Act (FCRA) is a (U.S. )law that regulates who can access a person's credit data and how credit reporting agencies handle consumer information.

Key Provisions of FCRA:

Limits access to credit reports to entities with a "permissible purpose" (e.g., lenders, employers, landlords).

Gives consumers the right to dispute inaccurate credit report information.

Mandates credit reporting agencies to ensure the accuracy and privacy of credit data.

Why Not the Other Options?

A . Fair and Accurate Credit Transactions Act (FACTA) Amends FCRA but focuses more on preventing identity theft, not on access to credit data.

B . General Data Protection Regulation (GDPR) A European law protecting personal data, but does not specifically regulate credit reporting.

C . European Union Data Protection Directive The predecessor of GDPR, also unrelated to U.S.
credit laws.

Thus, the correct answer is D. Fair Credit Reporting Act (FCRA) as it governs access to credit data.

Reference in Ethics in Technology:

Fair Credit Reporting Act (1970), 15 U.S.C. § 1681.

Federal Trade Commission (FTC) Guide on FCRA.

Solove, D. J. (2019). Nothing to Hide: The False Tradeoff Between Privacy and Security.

Reveal Solution Next Question

QUESTION: 16

What is a Gramm-Leach-BIiley Act (GLBA) financial privacy rule that presents a threat to data privacy?

Opt-in
Safeguard
Opt-out
Pretexting

Answer(s): C

Explanation:

The Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA) allows consumers to control how their personal financial information is shared through an opt-out mechanism.

Why is "Opt-Out" a Threat to Data Privacy?

The opt-out model assumes that consumers consent to having their data shared unless they take action to refuse.

Many consumers may not be aware of their right to opt-out, leading to widespread data sharing without explicit consent.

This is less privacy-protective than an opt-in model, where consumers must actively give permission before their data is shared.

Why Not the Other Options?

A . Opt-in This would enhance privacy, not threaten it.

B . Safeguard Refers to data security, not data-sharing policies.

D . Pretexting Involves fraudulent access to financial data, which is a different issue.

Thus, the correct answer is C. Opt-out, as it weakens consumer privacy protections by allowing data sharing unless the consumer takes action.

Reference in Ethics in Technology:

Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809.

Federal Trade Commission (FTC) Guide to GLBA Opt-Out Provisions.

Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life.

Reveal Solution Next Question

WGU Ethics-In-Technology Exam (page: 2) WGU Ethics In Technology QCO1 Updated on: 07-Feb-2026

QUESTION: 9

Explanation:

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

WGU Ethics-In-Technology Exam (page: 2)
WGU Ethics In Technology QCO1
Updated on: 07-Feb-2026