CHAPTER 2: ETHICS FOR IT WORKERS AND IT USERS
True / False
1. The United States has adopted labor laws and regulations that require a more precise definition of what is meant by
a professional employee.
a. True
b. False
2. When the Business Software Alliance (BSA) finds cases of software piracy, it can assess heavy monetary
penalties.
a. True
b. False
most egregious cases of software piracy each year.
a. True
b. False
4. There is a potential conflict of interest when IT consultants or auditors recommend their own products and services
or those of an affiliated vendor to remedy a problem they have detected.
a. True
b. False
5. The Foreign Corrupt Practices Act is a legally binding global treaty to fight bribery and corruption.
a. True
6. The United Nations Convention Against Corruption makes it a crime to bribe a foreign official, a foreign political
party official, or a candidate for foreign political office.
a. True
b. False
7. A bribe is a crime even if the payment was lawful under the laws of the foreign country in which it was paid.
a. True
b. False
Chapter 2: Ethics for IT Workers and IT Users
8. When it comes to distinguishing between bribes and gifts, the perceptions of the donor and recipient almost always
coincide.
a. True
b. False
a. True
b. False
10. Gifts come with no expectation of a future favor for the donor.
a. True
b. False
11. Currently no one IT professional organization has emerged as preeminent, so there is no universal code of ethics for
IT workers.
a. True
b. False
12. Laws provide a complete guide to ethical behavior.
a. True
b. False
13. Certification indicates that a professional possesses a particular set of skills, knowledge, or abilities, in the opinion of
the certifying organization.
a. True
b. False
14. Vendor certifications require passing a written exam, which usually contains multiple–choice questions because of
legal concerns about whether other types of exams can be graded objectively.
a. True
b. False
Chapter 2: Ethics for IT Workers and IT Users
15. Government licensing is generally administered at the federal level in the United States.
a. True
b. False
16. There are many industry association certifications in a variety of IT-related subject areas.
a. True
b. False
17. The core body of knowledge for any profession outlines an agreed-upon code of ethics and practices for those who
practice in that profession.
a. True
b. False
18. Government licensing of IT workers is common within most of the states of the United States.
a. True
b. False
19. From a legal perspective, there is both a reasonable person standard and a reasonable professional standard to
decide whether parties owe a duty of care.
a. True
b. False
20. A breach of the duty of care is defined as a failure to conform to the code of ethics of a professional organization.
a. True
b. False
21. While no policy can stop wrongdoers, it can establish boundaries for acceptable and unacceptable behavior and
enable management to punish violators.
a. True
b. False
Chapter 2: Ethics for IT Workers and IT Users
22. Compliance means to be in conformance with a profession’s core body of knowledge.
a. True
b. False
23. The internal audit department includes members of the board of directors who determine that the internal systems
and controls of the organization are adequate and effective.
a. True
b. False
24. Members of the internal audit team must be expert in detecting and investigating financial statement fraud.
a. True
b. False
25. Professionals require advanced training and experience, must exercise discretion and judgment in the course of
their work, and their work cannot be standardized.
a. True
b. False
Multiple Choice
26. From a legal perspective, IT workers are not recognized as professionals because they are not by the state
or federal government.
a. licensed b. sponsored
c. associated d. graded
27. In malpractice lawsuits, many courts have ruled that IT workers are not liable for malpractice because they .
a. do not belong to a professional organization b. fail to breach a duty of care
c. do not meet the legal definition of a professional d. are not certified
28. The is a trade group that represents the world’s largest software and hardware manufacturers.
a. Business Software Association (BSA) b. Business Software Alliance (BSA)
c. International Business Software (IBS) d. International Software Association (ISA)
Chapter 2: Ethics for IT Workers and IT Users
29. To prove fraud in a court of law, prosecutors must demonstrate that:
a. the wrongdoer made a false representation of material fact.
b. the wrongdoer did not intend to deceive the innocent party.
c. the innocent party never relied on the misrepresentation.
d. the innocent party was not injured.
30. is an effort by an employee to attract attention to a negligent, illegal, unethical, abusive, or dangerous act by a
company that threatens the public interest.
a. Professional malpractice b. Conflict of interest
c. Whistle–blowing d. Business intelligence
31. is the crime of obtaining goods, services, or property through deception or trickery.
a. Conflict of interest b. Breach of contract
c. Fraud d. Misrepresentation
32. Penalties for violating the Foreign Corrupt Practices Act (FCPA) are severe—corporations face a fine of up to
per violation.
a. $100,000 b. $500,000
c. $2 million d. $5 million
33. The Foreign Corrupt Practices Act (FCPA) makes it a crime to .
a. pay an official to perform some official function faster b. make lawful payments to a foreign official
c. make facilitating payments d. bribe a foreign official
34. The permits facilitating payments that are made for “routine government actions,” such as obtaining permits
or licenses.
a. BSA b. FCPA
c. Nations Convention Against Corruption d. Sarbanes-Oxley Act
35. The term distinguishes the person who uses a hardware or software product from the IT workers who
develop, install, service, and support the product.
a. IT professional b. shareholder
c. IT user d. stakeholder
Chapter 2: Ethics for IT Workers and IT Users
36. A states the principles and core values that are essential to the work of a particular occupational group.
a. work statement b. mission statement
c. manual of style d. professional code of ethics
37. The is a computing society founded in 1947 with more than 97,000 student and professional members in more
than 100 countries, and it publishes over 50 journals and 30 newsletters.
a. Institute of Electrical and Electronic Engineers Computer Society
b. Business Software Alliance
c. Association for Computing Machinery
d. Association of Information Technology Professionals
38. Which of the following is true about certification?
a. It guarantees the performance of an individual. b. It can be applied to products.
c. It is the same as licensing. d. It is a mandatory requirement by the law.
39. refers to the obligation to protect people against any unreasonable harm or risk.
a. Negligence b. Professional malpractice
c. Reasonable professional standard d. Duty of care
40. A(n) is the failure to act as a reasonable person would act.
a. professional malpractice b. duty of care
c. unreasonable professional standard d. breach of the duty of care
41. in a corporate setting can sometimes be directly traceable to IT users—they might allow it to happen or they
might actively engage in it.
a. Professional malpractice b. Breach of the duty of care
c. Negligence d. Software piracy
42. A is a hardware or software device that serves as a barrier between a company and the outside world and
limits access to the company’s network based on the organization’s Internet usage policy.
a. router b. hub
c. bridge d. firewall
Chapter 2: Ethics for IT Workers and IT Users
43. A vendor certification .
a. has no effect on an IT worker’s salary and
career prospects
c. may focus too narrowly on the technical details
of the vendor’s technology
b. usually does not require the purchase of expensive
training material and course instruction
d. requires vendors to pass lengthy essay exams
44. Which of the following statements is true about licensing of IT workers?
a. Licensing assures and ensures the competency
of individual workers.
c. There is no single administrative body to
accredit professional education programs for IT.
b. The United States holds a large number of
international or national licensing programs for IT
workers.
d. At present, there are several universally accepted
standards for licensing IT workers.
45. Professionals’ liability for injuries caused by their negligence is referred to as .
a. misrepresentation b. professional malpractice
c. negligence d. duty of care
46. The posting of thousands of State Department documents on the Wikileaks Web site is an example of .
a. inappropriate sharing of information b. breach of duty of care
c. inappropriate use of computing resources d. negligence
47. In the legal system, compliance usually refers to behavior that is in accordance with .
a. personal beliefs b. morality
c. legislation d. ethical codes
48. In 1972, the recommended that publicly held organizations establish audit committees.
a. SysAdmin, Audit, Network, Security
(SANS) Institute b. Association of Information Technology Professionals
(AITP)
c. Securities and Exchange Commission (SEC) d. National Council of Examiners for Engineering and
Surveying (NCEES)
Chapter 2: Ethics for IT Workers and IT Users
49. The goal of the standards set by the Foreign Corrupt Practices Act (FCPA) is to prevent companies from:
a. creating relationships between IT workers and
suppliers.
c. using slush funds or other means to disguise
payments to officials.
b. making facilitating payments for obtaining permits
or licenses.
d. providing misrepresentations of a material fact.
50. A survey by the Fawcett Society on the use of computing resources at work found that .
a. 20 percent of men admit to viewing
porn while at work
c. 31 percent of computer users engage
in software piracy
b. over 50 percent of mobile workers view porn from their Web–
enabled phones
d. nearly 75 percent of office workers spend 2 hours or more a
week on Facebook while at work
Chapter 2: Ethics for IT Workers and IT Users
Completion
51. A(n) is a calling that requires specialized knowledge and often long and intensive academic preparation.
52. is the misstatement or incomplete statement of a material fact.
53. The is a trade group that is funded through dues based on member companies’ software revenues and
through settlements from companies that commit software piracy.
54. A(n) is information used in a business, generally unknown to the public, that the company has taken strong
measures to keep confidential.
55. A(n) occurs when a party fails to perform certain express or implied obligations, which impairs or destroys
the essence of the contract.
56. involves providing money, property, or favors to someone in business or government to obtain a business
advantage.
57. One of the most common ethical problems for members of the IT profession is , which involves lying on a
resume and claiming competence in an IT skill that is in high demand.
a guideline for ethical decision making.
59. Certifications from generally require a certain level of experience and a broader perspective than vendor
certifications.
60. Defendants who have particular expertise or competence are measured against a reasonable .
Chapter 2: Ethics for IT Workers and IT Users
61. The core for any profession outlines agreed-upon sets of skills and abilities that all licensed professionals
must possess.
62. has been defined as not doing something that a reasonable person would do, or doing something that a
reasonable person would not do.
63. In the United States, a(n) gives permission to engage in an activity or operate a business.
64. The courts decide whether parties owe a duty of care by applying a(n) standard to evaluate how an
objective, careful, and conscientious person would have acted in the same circumstance.
65. A breach of the is the failure to act as a reasonable person would act.
66. means to be in accordance with established policies, guidelines, specifications, or legislation.
67. Many organizations have created a new position, the , to deal with demonstrating compliance to
multiple government and industry regulations.
68. The of a board of directors provides assistance to the board in fulfilling its responsibilities with respect to the
oversight of the quality and integrity of the organization’s accounting and reporting practices and controls, including
financial statements and reports.
69. Most organizations have a(n) department whose primary responsibilities include determining that internal
systems and controls are adequate and effective.
Chapter 2: Ethics for IT Workers and IT Users
Essay
71. Discuss the issue of whistle-blowing in the IT context.
72. List reasons for there being few international or national licensing programs for IT professionals.
73. What is a professional code of ethics?
74. Define the term conflict of interest and provide an IT–related example of this.
Chapter 2: Ethics for IT Workers and IT Users
75. Clarify the difference between an organization’s audit committee and its internal audit department.