Q22. An IT company adopts a professional cod of ethics suggested by a nationally recognized IT professionals organization. Which benefit to the company can be directly derived from adopting a professional code of ethics?

Q23. Which technology has the National Security Agency (NSA) used to intercept and record telephone conversations in several non-U.S. countries?

Q24. Which data retention practice complies with the General Data Protection Regulation (GDPR)?

Q25. An organization is concerned about its cybersecurity after identifying unauthorized records in its payroll database. The organization hires a consultant to test its cyberdefenses. The consultant executes several test attacks on the organization’s software and successfully demonstrates that by using Structured Query Language (SOL) injection, the consultant can add rows to the payroll database without obtaining the proper permissions.
Which hacker classification does the consultant fall under?

Q26. To gather data for improved customer profiles, a social media platform uses microphone data from its users in the United States. Which U.S. Constitulional amendment does this action violate?

Q27. What is the first step in ethical decision-making for an IT professional?

Q28. A software company continues to refine and update the predictive algorithm that makes its product the market leader. Although the company announces some changes, most are unannounced so that people and businesses remain unaware.
What is this company protecting?

Q29. An engineer is working on a project to manufacture radar processing equipment for the U.S. military. As part of the project contract, all devices must be new. The engineer discovers that the manufacturer has a policy of using refurbished parts. The engineer speaks to their manager about it and is ignored.
What should this engineer do?

Q30. A credit reporting agency collects personally identifiable information (Pll) from customers. The agency appoints a data protection officer (DPO), who is responsible for overseeing the agency’s data protection strategy and enforcing data compliance requirements.
Which legislation should the DPO use as the basis for governing the collection and disclosure of Pll?

Q31. A cloud computing company uses machine learning software to screen the resumes of job seekers. The company’s aim is to reduce potential human prejudice in the hiring process. To set up the software and train the machine learning model, the company provides information from its hiring decisions over the past five years. After several months of using the software, the company runs an audit and finds that the software screens out minority job seekers at a much higher rate.
Which behavior is the trained machine learning model displaying?

Q32. A company notices a drift in model performance due to suspicious alterations of the source data. It hires a specialist to test the security of its information systems and look for vulnerabilities attackers might have exploited.
Which name describes this specialist?

Q33. An internet company develops a search engine to index websites and documents published online. The index displays short excerpts from search results in response to queries. Many of the indexed sites and documents are copyrighted.
Which doctrine covers the company’s employment and reproduction of these materials?

Q34. Which principle, according to the Organisation for Economic Co-operation and Development’s (OECD) privacy guidelines, states that people have the right to review their data, challenge its correctness, and have incorrect data changed?

Q35. Which piece of legislation outlines who may access a person’s credit data?

Q36. An IT company adopts a professional cod of ethics suggested by a nationally recognized IT professionals organization. Which benefit to the company can be directly derived from adopting a professional code of ethics?

Q37. An organization creating a new consumer-profiling software tool has concerns about the software’s ability to accurately capture and process data. The team decides to use an iterative approach to write the code, allowing for continuous testing and adjustment of requirements. The organization believes this will help ensure the software’s data collection capabilities are both efficient and accurate.
Which methodology has the organization employed?