WGU D333 Ethics in Technology Updated
Questions and Answers (2026/2027) |
Practice Review | A+ Verified
• A network attack in which an intruder gains access to a network and stays there—
undetected—with the intention of stealing data over a long period of time (weeks or
even months). -✓✓advanced persistent threat (APT)
• An agreement of the World Trade Organization that requires member governments to
ensure that intellectual property rights can be enforced under their laws and that
penalties for infringement are tough enough to deter further violations. -✓✓Agreement
on Trade-Related Aspects of Intellectual Property Rights (TRIPS)
• A wide-ranging act that authorized $787 billion in spending and tax cuts over a 10-year
period and included strong privacy provisions for electronic health records, such as
banning the sale of health information, promoting the use of audit trails and encryption,
and providing rights of access for patients. -✓✓American Recovery and Reinvestment
Act
• The estimated loss from a potential risk event over the course of a year. The following
equation is used to calculate the annual loss expectancy: ARO × SLE = ALE. Where
ARO is the annualized rate of occurrence, an estimate of the probability that this event
will occur over the course of a year and SLE is the single loss expectancy, the
estimated loss that would be incurred if the event happens. -✓✓annualized loss
expectancy (ALE)
• An estimate of the probability that a risk event will occur over the course of a year. -
✓✓annualized rate of occurrence (ARO)
• A service that allows anonymity on the Internet by using a computer program that
strips the originating header and/or IP address from the message and then forwards the
message to its intended recipient. -✓✓anonymous remailer service
• Laws designed to reduce frivolous SLAPPs (strategic lawsuit against public
participation (SLAPP), which is a lawsuit filed by corporations, government officials, and
others against citizens and community groups who oppose them on matters of
concern). -✓✓anti-SLAPP laws
• A group that provides assistance to the board of directors in fulfilling its responsibilities
with respect to the oversight of the quality and integrity of the organization's accounting
and reporting practices and controls, including financial statements and reports; the
organization's compliance with legal and regulatory requirements; the qualifications,
,independence, and performance of the company's independent auditor; and the
performance of the company's internal audit team. -✓✓audit committee
• The moral corruption of people in power, which is often facilitated by a tendency for
people to look the other way when their leaders act inappropriately. -✓✓Bathsheba
syndrome
• The first 10 amendments to the United States Constitution that spell out additional
rights of individuals. -✓✓Bill of Rights
• A type of dynamic testing that involves viewing the software unit as a device that has
expected input and output behaviors but whose internal workings are unknown (a black
box). -✓✓black-box testing
• A sophisticated threat that combines the features of a virus, worm, Trojan horse, and
other malicious code into a single payload. -✓✓blended threat
• An agreed-upon sets of skills and abilities that all licensed professionals must
possess. -✓✓body of knowledge
• A large group of computers, which are controlled from one or more remote locations
by hackers, without the knowledge or consent of their owners. -✓✓botnet
• The failure to act as a reasonable person would act. -✓✓breach of the duty of care
• A trade group that represent the world's largest software and hardware manufacturers.
-✓✓BSA | The Software Alliance
• A risk-based strategy that includes an occupant emergency evacuation plan, a
continuity of operations plan, and an incident management plan with an active
governance process to minimize the potential impact of any security incident and to
ensure business continuity in the event of a cyberattack or some form of disaster. -
✓✓business continuity plan
• A set of interrelated components—including hardware, software, databases, networks,
people, and procedures—that collects and processes data and disseminates the output.
-✓✓business information system
• Collection of best practices that help organizations improve their processes. -
✓✓Capability Maturity Model Integration (CMMI) models
• Software that generates and grades tests that humans can pass and all but the most
sophisticated computer programs cannot. -✓✓CAPTCHA (Completely Automated
Public Turing Test to Tell Computers and Humans Apart)
, • An act signed into law in 1998 with the aim of prohibiting the making of harmful
material available to minors via the Internet; the law was ultimately ruled largely
unconstitutional. -✓✓Child Online Protection Act (COPA)
• An act passed in 2000; it required federally financed schools and libraries to use some
form of technological protection (such as an Internet filter) to block computer access to
obscene material, pornography, and anything else considered harmful to minors. -
✓✓Children's Internet Protection Act (CIPA)
• An act implemented in 1998 in an attempt to give parents control over the collection,
use, and disclosure of their children's personal information. -✓✓Children's Online
Privacy Protection Act (COPPA)
• Refers to confidentiality, integrity, and availability. -✓✓CIA security triad
• A process and a set of tools designed to enhance healthcare-related decision making
through the use of clinical knowledge and patientspecific information to improve
healthcare delivery. -✓✓clinical decision support (CDS)
• A specific application of CMMI frequently used to assess and improve software
development practices. -✓✓CMMI-Development (CMMI-DEV)
• A statement that highlights an organization's key ethical issues and identifies the
overarching values and principles that are important to the organization and its decision
making. -✓✓code of ethics
• A employment situation in which two employers have actual or potential legal rights
and duties with respect to the same employee or group of employees. -
✓✓coemployment relationship
• An act passed in 1994 that amended the Wiretap Act and Electronic Communications
Privacy Act, which required the telecommunications industry to build tools into its
products that federal investigators could use—after obtaining a court order—to
eavesdrop on conversations and intercept electronic communications. -
✓✓Communications Assistance for Law Enforcement Act (CALEA)
• Title V of the Telecommunications Act, it aimed at protecting children from
pornography, including imposing $250,000 fines and prison terms of up to two years for
the transmission of "indecent" material over the Internet. -✓✓Communications Decency
Act (CDA)
• A discipline that combines elements of law and computer science to identify, collect,
examine, and preserve data from computer systems, networks, and storage devices in
Questions and Answers (2026/2027) |
Practice Review | A+ Verified
• A network attack in which an intruder gains access to a network and stays there—
undetected—with the intention of stealing data over a long period of time (weeks or
even months). -✓✓advanced persistent threat (APT)
• An agreement of the World Trade Organization that requires member governments to
ensure that intellectual property rights can be enforced under their laws and that
penalties for infringement are tough enough to deter further violations. -✓✓Agreement
on Trade-Related Aspects of Intellectual Property Rights (TRIPS)
• A wide-ranging act that authorized $787 billion in spending and tax cuts over a 10-year
period and included strong privacy provisions for electronic health records, such as
banning the sale of health information, promoting the use of audit trails and encryption,
and providing rights of access for patients. -✓✓American Recovery and Reinvestment
Act
• The estimated loss from a potential risk event over the course of a year. The following
equation is used to calculate the annual loss expectancy: ARO × SLE = ALE. Where
ARO is the annualized rate of occurrence, an estimate of the probability that this event
will occur over the course of a year and SLE is the single loss expectancy, the
estimated loss that would be incurred if the event happens. -✓✓annualized loss
expectancy (ALE)
• An estimate of the probability that a risk event will occur over the course of a year. -
✓✓annualized rate of occurrence (ARO)
• A service that allows anonymity on the Internet by using a computer program that
strips the originating header and/or IP address from the message and then forwards the
message to its intended recipient. -✓✓anonymous remailer service
• Laws designed to reduce frivolous SLAPPs (strategic lawsuit against public
participation (SLAPP), which is a lawsuit filed by corporations, government officials, and
others against citizens and community groups who oppose them on matters of
concern). -✓✓anti-SLAPP laws
• A group that provides assistance to the board of directors in fulfilling its responsibilities
with respect to the oversight of the quality and integrity of the organization's accounting
and reporting practices and controls, including financial statements and reports; the
organization's compliance with legal and regulatory requirements; the qualifications,
,independence, and performance of the company's independent auditor; and the
performance of the company's internal audit team. -✓✓audit committee
• The moral corruption of people in power, which is often facilitated by a tendency for
people to look the other way when their leaders act inappropriately. -✓✓Bathsheba
syndrome
• The first 10 amendments to the United States Constitution that spell out additional
rights of individuals. -✓✓Bill of Rights
• A type of dynamic testing that involves viewing the software unit as a device that has
expected input and output behaviors but whose internal workings are unknown (a black
box). -✓✓black-box testing
• A sophisticated threat that combines the features of a virus, worm, Trojan horse, and
other malicious code into a single payload. -✓✓blended threat
• An agreed-upon sets of skills and abilities that all licensed professionals must
possess. -✓✓body of knowledge
• A large group of computers, which are controlled from one or more remote locations
by hackers, without the knowledge or consent of their owners. -✓✓botnet
• The failure to act as a reasonable person would act. -✓✓breach of the duty of care
• A trade group that represent the world's largest software and hardware manufacturers.
-✓✓BSA | The Software Alliance
• A risk-based strategy that includes an occupant emergency evacuation plan, a
continuity of operations plan, and an incident management plan with an active
governance process to minimize the potential impact of any security incident and to
ensure business continuity in the event of a cyberattack or some form of disaster. -
✓✓business continuity plan
• A set of interrelated components—including hardware, software, databases, networks,
people, and procedures—that collects and processes data and disseminates the output.
-✓✓business information system
• Collection of best practices that help organizations improve their processes. -
✓✓Capability Maturity Model Integration (CMMI) models
• Software that generates and grades tests that humans can pass and all but the most
sophisticated computer programs cannot. -✓✓CAPTCHA (Completely Automated
Public Turing Test to Tell Computers and Humans Apart)
, • An act signed into law in 1998 with the aim of prohibiting the making of harmful
material available to minors via the Internet; the law was ultimately ruled largely
unconstitutional. -✓✓Child Online Protection Act (COPA)
• An act passed in 2000; it required federally financed schools and libraries to use some
form of technological protection (such as an Internet filter) to block computer access to
obscene material, pornography, and anything else considered harmful to minors. -
✓✓Children's Internet Protection Act (CIPA)
• An act implemented in 1998 in an attempt to give parents control over the collection,
use, and disclosure of their children's personal information. -✓✓Children's Online
Privacy Protection Act (COPPA)
• Refers to confidentiality, integrity, and availability. -✓✓CIA security triad
• A process and a set of tools designed to enhance healthcare-related decision making
through the use of clinical knowledge and patientspecific information to improve
healthcare delivery. -✓✓clinical decision support (CDS)
• A specific application of CMMI frequently used to assess and improve software
development practices. -✓✓CMMI-Development (CMMI-DEV)
• A statement that highlights an organization's key ethical issues and identifies the
overarching values and principles that are important to the organization and its decision
making. -✓✓code of ethics
• A employment situation in which two employers have actual or potential legal rights
and duties with respect to the same employee or group of employees. -
✓✓coemployment relationship
• An act passed in 1994 that amended the Wiretap Act and Electronic Communications
Privacy Act, which required the telecommunications industry to build tools into its
products that federal investigators could use—after obtaining a court order—to
eavesdrop on conversations and intercept electronic communications. -
✓✓Communications Assistance for Law Enforcement Act (CALEA)
• Title V of the Telecommunications Act, it aimed at protecting children from
pornography, including imposing $250,000 fines and prison terms of up to two years for
the transmission of "indecent" material over the Internet. -✓✓Communications Decency
Act (CDA)
• A discipline that combines elements of law and computer science to identify, collect,
examine, and preserve data from computer systems, networks, and storage devices in
