Back to Subject

Unit 6: Ethical and Professional issues in Information Security - Practice Quiz

CSE332 — Industry Ethics And Legal Issues 50 Questions
0 Correct 0 Wrong 50 Left
0/50

1 Which of the following statements best describes the relationship between laws and ethics in Information Security?

A. Ethics are enforced by police agencies, while laws are enforced by professional organizations.
B. Laws always supersede ethics in every international jurisdiction.
C. Laws and ethics are identical concepts.
D. Laws are formally enforced rules mandated by the state, while ethics are socially acceptable behaviors based on cultural norms.

2 In the context of organizational policy versus law, what is a primary requirement for a policy to be legally enforceable within an organization?

A. The policy must be disseminated, read, understood, and agreed to by the employee.
B. The policy must be strictly verbal to avoid paper trails.
C. The policy must be reviewed by the United Nations.
D. The policy must be written in Latin.

3 What is the legal concept known as 'Vicarious Liability'?

A. An employee is liable for the mistakes of the CEO.
B. Liability that applies only to hardware manufacturers.
C. An organization is never liable for the actions of its employees.
D. An organization can be held legally responsible for the actions of its employees performed within the course of their employment.

4 Which of the following best defines 'Due Care' in information security?

A. Ensuring a 100% guarantee of security.
B. Taking the measures that a reasonable and prudent person would take to prevent harm.
C. The process of hiring a lawyer.
D. Performing background checks on all customers.

5 What is the distinction between 'Due Care' and 'Due Diligence'?

A. Due Care is optional; Due Diligence is mandatory.
B. Due Care is the action; Due Diligence is the management and tracking of that action.
C. They are synonymous and can be used interchangeably.
D. Due Care applies to hardware; Due Diligence applies to software.

6 Which specific Act provides the legal framework for electronic commerce and cyber crime in India?

A. The Companies Act, 2013
B. The Information Technology Act, 2000
C. The Indian Penal Code, 1860
D. The Consumer Protection Act, 1986

7 Under the IT Act 2000, which entity acts as the root authority for regulating Digital Signature Certificates in India?

A. Controller of Certifying Authorities (CCA)
B. NASSCOM
C. CERT-In
D. Reserve Bank of India

8 What is a 'Salami Attack' in the context of financial cyber crimes?

A. Hacking a system using a brute force dictionary attack.
B. A denial of service attack using food delivery apps.
C. Stealing physical server racks.
D. Removing small amounts of money from many accounts, such that the loss is unnoticed by individual victims.

9 In a project management context, if a Project Manager discovers a security flaw right before the product launch, what is the most ethical course of action?

A. Blame the development team and fire the lead developer.
B. Disclose the risk to stakeholders and delay the launch if the risk is critical.
C. Ignore the flaw to meet the deadline and fix it later if someone notices.
D. Release the product but disable the security logging so the flaw isn't recorded.

10 Which of the following is a form of Alternative Dispute Resolution (ADR)?

A. Arbitration
B. Criminal Litigation
C. Supreme Court Hearing
D. Police Investigation

11 Which tool is widely used for network discovery and security auditing, often referred to as a 'port scanner'?

A. Wordpress
B. Photoshop
C. VLC
D. Nmap

12 Wireshark is best described as which type of tool?

A. Packet Analyzer / Sniffer
B. Password Cracker
C. Antivirus Software
D. Firewall

13 In the context of the IT Act 2000, what does Section 66F deal with?

A. Publishing obscene material
B. Cyber Terrorism
C. Theft of computer hardware
D. Sending offensive messages

14 Identify the type of cyber attack: An attacker sends an email appearing to be from a legitimate bank asking the user to click a link and verify their password.

A. SQL Injection
B. Phishing
C. Man-in-the-Middle
D. DDoS

15 What is the primary difference between Arbitration and Mediation?

A. Arbitration involves a third party making a decision; Mediation involves a third party facilitating a negotiated agreement.
B. There is no difference.
C. Arbitration happens in court; Mediation happens online.
D. Mediation is binding; Arbitration is not.

16 Which open-source framework is used for penetration testing and executing exploit code against a target machine?

A. Notepad++
B. GIMP
C. Outlook
D. Metasploit

17 Why is 'Ignorance of the Law' generally not a valid defense?

A. Because lawyers are too expensive.
B. Because laws are written in simple English.
C. Because citizens are expected to know the laws of the jurisdiction they reside in.
D. It is a valid defense if you are a tourist.

18 What is a 'Zero-Day' vulnerability?

A. A software that costs zero dollars.
B. A vulnerability known to the vendor for zero days (unknown) before it is exploited.
C. A virus that deletes data in zero days.
D. A security patch released on Sunday.

19 Case Study: An employee installs a logic bomb to delete servers if their name disappears from the payroll. What type of threat does this represent?

A. Insider Threat
B. Advanced Persistent Threat (APT)
C. State-sponsored Espionage
D. Script Kiddie

20 Which professional organization is known for its Code of Ethics and Professional Conduct for project managers?

A. WHO
B. FIFA
C. PMI (Project Management Institute)
D. UNESCO

21 According to typical risk formulas, if is the probability of an event and is the impact, how is Risk () generally calculated?

A.
B.
C.
D.

22 Which of the following is NOT a benefit of Alternative Dispute Resolution (ADR)?

A. It allows for confidentiality.
B. It is often less expensive than court trials.
C. It establishes a public legal precedent for future cases.
D. It is generally faster than litigation.

23 What is the primary function of CERT-In (Indian Computer Emergency Response Team)?

A. To manufacture computer hardware.
B. To act as the national agency for performing functions in the area of cyber security.
C. To provide internet connections to rural areas.
D. To teach coding to school children.

24 Which tool is primarily used for password cracking?

A. Calculater
B. Adobe Reader
C. Skype
D. John the Ripper

25 What is 'Whistle-blowing' in a professional context?

A. A method of cooling down server rooms.
B. The act of an employee exposing information about illegal or unethical activity within their organization.
C. A signaling method used in network protocols.
D. Calling time-out during a project meeting.

26 Under the IT Act, tampering with computer source documents is an offense under which section?

A. Section 420
B. Section 10
C. Section 302
D. Section 65

27 Which type of intellectual property protects the expression of an idea (like code or manual text) rather than the idea itself?

A. Trade Secret
B. Trademark
C. Copyright
D. Patent

28 What is the rise in Cyber Crime primarily attributed to?

A. The increased digitization of services and interconnectedness of devices.
B. Strict global laws preventing internet access.
C. People stopped using the internet.
D. The decrease in computer processing power.

29 In the context of Cyber Law, what is 'Jurisdiction'?

A. The physical location of a hacker's keyboard.
B. The speed of the internet connection.
C. A type of antivirus software.
D. The power of a court to adjudicate cases and issue orders.

30 Ethical Dilemma: You are a security consultant. A client asks you to hack a competitor's database to recover 'stolen' intellectual property. What should you do?

A. Do it, but charge triple the rate.
B. Refuse, as 'hacking back' is generally illegal and unethical.
C. Post the request on social media immediately.
D. Do it, because the competitor started it.

31 What is 'Ransomware'?

A. Malware that encrypts the victim's data and demands payment for the decryption key.
B. Free software distributed by the government.
C. Software that speeds up your computer.
D. Hardware used to secure server rooms.

32 Which of the following is an example of 'Social Engineering'?

A. Installing a firewall.
B. Writing a Python script to scan ports.
C. Updating Windows.
D. Tailgating (following an authorized person through a secure door).

33 Why is it important for an organization to consult legal counsel when drafting security policies?

A. Lawyers are good at checking spelling.
B. To ensure the policies comply with applicable local, state, and federal laws.
C. To make the document look expensive.
D. To increase the length of the document.

34 What is a 'Botnet'?

A. A new social media platform.
B. A net used for fishing.
C. A network of private computers infected with malicious software and controlled as a group.
D. A robot network used for manufacturing cars.

35 Which tool is a wireless network security cracker?

A. Excel
B. Norton Ghost
C. Aircrack-ng
D. Paint

36 Case Study: The 2017 'WannaCry' attack is an example of which type of cyber crime?

A. DDOS
B. Global Ransomware Attack
C. Phishing Campaign
D. SQL Injection

37 In the context of ethics, what constitutes a 'Conflict of Interest'?

A. When an individual's personal interests clash with their professional duties.
B. When two employees argue.
C. When a computer creates a conflict in IP addresses.
D. When a project is delayed.

38 Section 43 of the IT Act 2000 imposes penalties for which activity?

A. Not paying taxes
B. Murder
C. Damage to computer systems without permission
D. Traffic violations

39 What is the 'Prudent Man Rule'?

A. A rule that says men are smarter than computers.
B. A rule preventing men from working in HR.
C. A rule strictly for banking software.
D. A legal standard requiring fiduciaries to manage assets with the same care a prudent person would use for their own.

40 What is 'Steganography'?

A. Hiding data within other files (like hiding a text file inside an image).
B. Stealing data.
C. The study of dinosaurs.
D. Encrypting a hard drive.

41 Which of the following is a key advantage of Arbitration over Litigation in international disputes?

A. Arbitrators do not require any legal knowledge.
B. Arbitration is always free.
C. Arbitration awards are generally easier to enforce internationally (e.g., via the New York Convention) than court judgments.
D. Arbitration is public and televised.

42 What is 'Typosquatting'?

A. Deleting system fonts.
B. Sitting on a keyboard.
C. Typing very fast.
D. Registering domain names that are very similar to popular domains (e.g., goggle.com instead of google.com).

43 Which section of the IT Act was struck down by the Supreme Court of India in the Shreya Singhal case for being unconstitutional?

A. Section 66A
B. Section 67
C. Section 66F
D. Section 43

44 Burp Suite is a tool commonly used for:

A. Graphic Design
B. Web application security testing
C. Video Editing
D. Spreadsheet calculation

45 If an employee creates a software program at work using company resources, who generally owns the Copyright?

A. The employee.
B. Microsoft.
C. The public domain.
D. The employer.

46 What is the primary goal of a Denial of Service (DoS) attack?

A. To encrypt data.
B. To make a machine or network resource unavailable to its intended users.
C. To scan for open ports.
D. To steal passwords.

47 Which of the following represents an ethical dilemma regarding privacy vs. security?

A. Installing a firewall to block viruses.
B. Using strong passwords.
C. Backing up data to the cloud.
D. Monitoring employee emails to prevent data leaks vs. respecting employee privacy.

48 What is 'Conciliation' in the context of ADR?

A. A fist fight to settle a dispute.
B. Ignoring the problem.
C. A process where a third party meets with disputants separately and together to lower tensions and suggest settlements.
D. A court trial.

49 Case Study: The 'Morris Worm' of 1988 is significant because:

A. It was the first computer virus.
B. It stole money from banks.
C. It resulted in the first conviction under the US Computer Fraud and Abuse Act.
D. It destroyed the internet permanently.

50 What is the 'Ten Commandments of Computer Ethics'?

A. A hardware manual.
B. A set of laws passed by the UN.
C. A set of ethical standards created by the Computer Ethics Institute.
D. A biblical text.
Previous MCQ
Unit 5