Chapter 02: Ethics for IT Workers and IT Users
True / False
1. Software piracy in a corporate setting is rarely directly traceable to IT staff members?
a.
True
b.
False
2. When the Business Software Alliance (BSA) finds cases of software piracy, it can assess heavy monetary
penalties.
a.
True
b.
False
3. The Business Software Alliance (BSA) has a few dozen lawyers and investigators who prosecute only the
100 or so most egregious cases of software piracy each year.
a.
True
b.
False
4. There is a potential conflict of interest when IT consultants or auditors recommend their own products and
services or those of an affiliated vendor to remedy a problem they have detected.
a.
True
b.
False
Chapter 02: Ethics for IT Workers and IT Users
5. The Foreign Corrupt Practices Act is a legally binding global treaty to fight bribery and corruption.
a.
True
b.
False
6. The United Nations Convention Against Corruption makes it a crime to bribe a foreign official, a foreign
political party official, or a candidate for foreign political office.
a.
True
b.
False
7. A bribe is a crime even if the payment was lawful under the laws of the foreign country in which it was paid.
a.
True
b.
False
Chapter 02: Ethics for IT Workers and IT Users
8. When it comes to distinguishing between bribes and gifts, the perceptions of the donor and recipient almost
always coincide.
a.
True
b.
False
9. To qualify legally as a bribe, the gift or payment must be made directly from donor to recipient.
a.
True
b.
False
10. Gifts come with no expectation of a future favor for the donor.
a.
True
b.
False
11. Currently no one IT professional organization has emerged as preeminent, so there is no universal code of
ethics for IT workers.
a.
True
b.
False
Chapter 02: Ethics for IT Workers and IT Users
12. Laws provide a complete guide to ethical behavior.
a.
True
b.
False
13. Certification indicates that a professional possesses a particular set of skills, knowledge, or abilities, in the
opinion of the certifying organization.
a.
True
b.
False
14. Vendor certifications require passing a written exam, which usually contains multiple-choice questions
because of legal concerns about whether other types of exams can be graded objectively.
a.
True
b.
False
Chapter 02: Ethics for IT Workers and IT Users
15. Government licensing is generally administered at the federal level in the United States.
a.
True
b.
False
16. There are many industry association certifications in a variety of IT-related subject areas.
a.
True
b.
False
17. The core body of knowledge for any profession outlines an agreed-upon code of ethics and practices for
those who practice in that profession.
a.
True
b.
False
18. Government licensing of IT workers is common within most of the states of the United States.
a.
True
Chapter 02: Ethics for IT Workers and IT Users
b.
False
19. From a legal perspective, there is both a reasonable person standard and a reasonable professional standard
to decide whether parties owe a duty of care.
a.
True
b.
False
20. A breach of the duty of care is defined as a failure to conform to the code of ethics of a professional
organization.
a.
True
b.
False
21. While no policy can stop wrongdoers, it can establish boundaries for acceptable and unacceptable behavior
and enable management to punish violators.
a.
True
b.
False
Chapter 02: Ethics for IT Workers and IT Users
22. Compliance means to be in conformance with a profession’s core body of knowledge.
a.
True
b.
False
23. The internal audit department includes members of the board of directors who determine that the internal
systems and controls of the organization are adequate and effective.
a.
True
b.
False
24. Members of the internal audit team must be expert in detecting and investigating financial statement fraud.
a.
True
b.
False
25. A trade secret is information, generally unknown to the public, that a company has taken strong measures to
Chapter 02: Ethics for IT Workers and IT Users
keep confidential.
a.
True
b.
False
Multiple Choice
26. Which trade group protects the intellectual property of member companies and advocates a legal and
regulatory environment that benefits the software industry?
a.
Software & Information Industry Association (SIIA)
b.
Association for Computing Machinery (ACM)
c.
Institute of Electrical and Electronics Engineers (IEEE)
d.
SysAdmin, Audit, Network, Security (SANS) Institute
27. In malpractice lawsuits, many courts have ruled that IT workers are not liable for malpractice because they:
a.
do not belong to a professional organization.
b.
fail to breach a duty of care.
c.
do not meet the legal definition of a professional.
d.
are not certified.
Chapter 02: Ethics for IT Workers and IT Users
28. Which of the following is a trade group that represents the world’s largest software and hardware
manufacturers?
a.
Business Software Association (BSA)
b.
Business Software Alliance (BSA)
c.
International Business Software (IBS)
d.
International Software Association (ISA)
29. To prove fraud in a court of law, prosecutors must demonstrate that:
a.
the wrongdoer made a false representation of material fact.
b.
the innocent party never relied on the misrepresentation.
c.
the wrongdoer did not intend to deceive the innocent party.
d.
the wrongdoer was not injured
30. Which of the following is an effort by an employee to attract attention to a negligent, illegal, unethical,
abusive, or dangerous act by a company that threatens the public interest?
a.
Professional malpractice
b.
Conflict of interest
c.
Whistle-blowing
d.
Business intelligence
Chapter 02: Ethics for IT Workers and IT Users
31. The crime of obtaining goods, services, or property through deception or trickery is known as which of the
following?
a.
Conflict of interest
b.
Breach of contract
c.
Fraud
d.
Misrepresentation
32. Penalties for violating the Foreign Corrupt Practices Act (FCPA) are severe-corporations face a fine of up to
how much per violation?
a.
$100,000
b.
$500,000
c.
$2 million
d.
$5 million
33. The Foreign Corrupt Practices Act (FCPA) makes it a crime to do which of the following?
a.
pay an official to perform some official function faster
b.
make lawful payments to a foreign official
c.
make facilitating payments
d.
bribe a foreign official
Chapter 02: Ethics for IT Workers and IT Users
34. Under what circumstance might a gift be considered a bribe?
a.
When given as a gesture of friendship
b.
The gift exchange is made directly from donor to recipient
c.
The gift comes with no expectation of a future favor
d.
When the gift has not been declared
35. Which term distinguishes the person who uses a hardware or software product from the IT workers who
develop, install, service, and support the product?
a.
IT professional
b.
shareholder
c.
IT user
d.
stakeholder
36. Which of the following states the principles and core values that are essential to the work of a particular
occupational group?
a.
work statement
b.
mission statement
c.
manual of style
d.
professional code of ethics
Chapter 02: Ethics for IT Workers and IT Users
37. Which entity is a computing society founded in 1947 with more than 97,000 student and professional
members in more than 100 countries, and it publishes over 50 journals and 30 newsletters?
a.
Institute of Electrical and Electronic Engineers Computer Society
b.
Business Software Alliance
c.
Association for Computing Machinery
d.
Association of Information Technology Professionals
38. Which of the following is true about certification?
a.
It guarantees the performance of an individual.
b.
It can be applied to products.
c.
It is the same as licensing.
d.
It is a mandatory requirement by the law.
39. What term refers to the obligation to protect people against any unreasonable harm or risk?
a.
Negligence
b.
Professional malpractice
c.
Reasonable professional standard
d.
Duty of care
Chapter 02: Ethics for IT Workers and IT Users
40. Which term is used to describe the failure to act as a reasonable person would act?
a.
professional malpractice
b.
duty of care
c.
unreasonable professional standard
d.
breach of the duty of care
41. Which of the following is defined as not doing something that a reasonable person would do or doing
something that a reasonable person would not do?
a.
professional malpractice
b.
breach of the duty of care
c.
negligence
d.
software piracy
42. A hardware or software device that serves as a barrier between a company and the outside world and limits
access to the company’s network based on the organization’s Internet usage policy is known as which of the
following?
a.
router
b.
hub
c.
bridge
d.
firewall
Chapter 02: Ethics for IT Workers and IT Users
43. A vendor certification:
a.
has no effect on an IT worker’s salary and career prospects.
b.
usually does not require the purchase of expensive training material and course instruction.
c.
may focus too narrowly on the technical details of the vendor’s technology.
d.
requires vendors to pass lengthy essay exams.
44. Professionals who breach the duty of care are liable for injuries that their negligence causes. This liability is
commonly referred to as which of the following?
a.
professional malpractice
b.
breach of the duty of care
c.
professional standard breach
d.
software piracy
45. At which level is licensing generally administered?
a.
federal
b.
state
c.
local
d.
association
Chapter 02: Ethics for IT Workers and IT Users
46. The posting of thousands of State Department documents on the WikiLeaks Web site is an example of
which of the following?
a.
inappropriate sharing of information
b.
breach of duty of care
c.
inappropriate use of computing resources
d.
negligence
47. In the legal system, compliance usually refers to behavior that is in accordance with which of the following?
a.
personal beliefs
b.
morality
c.
legislation
d.
ethical codes
48. In 1972, which organization recommended that publicly held organizations establish audit committees?
a.
SysAdmin, Audit, Network, Security (SANS) Institute
b.
Association of Information Technology Professionals (AITP)
c.
Securities and Exchange Commission (SEC)
d.
National Council of Examiners for Engineering and Surveying (NCEES)
Chapter 02: Ethics for IT Workers and IT Users
49. The goal of the standards set by the Foreign Corrupt Practices Act (FCPA) is to prevent companies from:
a.
creating relationships between IT workers and suppliers.
b.
making facilitating payments for obtaining permits or licenses.
c.
using slush funds or other means to disguise payments to officials.
d.
providing misrepresentations of a material fact.
50. A survey by the Fawcett Society on the use of computing resources at work found that:
a.
20 percent of men admit to viewing porn while at work
b.
over 50 percent of mobile workers view porn from their Web-enabled phones
c.
31 percent of computer users engage in software piracy
d.
nearly 75 percent of office workers spend 2 hours or more a week on Facebook while at work
51. Which of the following is defined as the misstatement or incomplete statement of a material fact?
a.
fraud
b.
piracy
c.
misrepresentation
d.
breach of contract
Chapter 02: Ethics for IT Workers and IT Users
52. Which of the following is a trade group that is funded through dues based on member companies’ software
revenues and through settlements from companies that commit software piracy?
a.
Business Software Alliance (BSA)
b.
Association for Computing Machinery (ACM)
c.
Institute of Electrical and Electronics Engineers (IEEE)
d.
SysAdmin, Audit, Network, Security (SANS) Institute
53. Information used in a business, generally unknown to the public, that the company has taken strong
measures to keep confidential is known as which of the following?
a.
copyright
b.
patent
c.
trade secret
d.
certification
54. Which of the following occurs when a party fails to perform certain express or implied obligations, which
impairs or destroys the essence of the contract?
a.
material breach of contract
b.
fraud
c.
misrepresentation
d.
bribery
Chapter 02: Ethics for IT Workers and IT Users
55. One of the most common ethical problems for members of the IT profession when a potential employee lies
on a resume and claims competence in an IT skill that is in high demand. This act is known as which of the
following?
a.
misrepresentation
b.
fraud
c.
resume inflation
d.
breach of the duty of care
Subjective Short Answer
56. Discuss the issue of whistle-blowing in the IT context.
Chapter 02: Ethics for IT Workers and IT Users
57. Explain how the courts decide whether parties owe a duty of care.
58. What is a professional code of ethics?
59. Define the term conflict of interest and provide an IT-related example of this.
Chapter 02: Ethics for IT Workers and IT Users
60. Clarify the difference between an organization’s audit committee and its internal audit department.