D333: Ethics in Technology Test
Questions and Answers.
Ethics - Answer A code of behavior that is defined by the group to which an individual
belongs
Morals - Answer The personal principles upon which an individual bases his or her decisions
about what is right and wrong
Foreign Corrupt Practices Act (FCPA) - Answer Makes it a crime to bribe a foreign official, a
foreign political party official, or a candidate for foreign political office
US-CERT - Answer A partnership between DHS and the public and private sectors that was
established to protect the nation's Internet infrastructure against cyberattacks by serving as a
clearinghouse for information on new viruses, worms, and other computer security topics
Internal Control - Answer the process established by an organization's board of directors,
managers, and IT group to provide reasonable assurance for the effectiveness and efficiency of
operations, the reliability of financial reporting, and compliance with applicable laws and
regulations.
Best achieved through separation of duties
Gramm-Leach-Bliley Act (GLBA) - Answer Established mandatory guidelines for the collection
and disclosure of personal financial information by financial institutions; requires financial
institutions to document their data security plans; and encourages institutions to implement
safeguards against pretexting
The Fair and Accurate Credit Transaction Act - Answer Allows consumers to request and
obtain a free credit report each year
Family Educational Rights and Privacy Act (FERPA) - Answer Provides students and their
parents with specific rights regarding the release of student records
Executive Order 12333 - Answer Defines the various government intelligence-gathering
agencies and defines what information can be collected, retained, and disseminated by the
agencies. It allows for the tangential collection of U.S. citizen data—even when those citizens
are not specifically targeted
, Electronic Communication Privacy Act (ECPA) - Answer 1) Protection of communication while
in transfer from sender to receiver
2) Protection of communications held in electronic storage
3) Prohibition of devices from recording, dialing, routing, addressing, and signaling information
without a search warrant
-Passed as an amendment to Wiretap Act
Title III of the Omnibus Crime Control and Safe Streets Act / Wiretap Act - Answer Regulates
interception of wire/telephone and oral communication. A warrant must be obtained from a
judge to conduct a wiretap, who can approve the warrant only if there is probable cause
Communications Assistance for Law Enforcement Act (CALEA) - Answer Requires the
telecommunications industry to build tools into its products that federal investigators can use—
after gaining a court order—to eavesdrop on conversations and intercept electronic
communications
USA Patriot Act - Answer Modified 15 existing statutes and gave sweeping new powers both
to domestic law enforcement and to international intelligence agencies, including increasing the
ability of law enforcement agencies to eavesdrop on telephone communication, intercept email
messages, and search medical, financial, and other records; the act also eased restrictions on
foreign intelligence gathering in the United States
USA Freedom Act - Answer Terminated the bulk collection of telephone metadata by the NSA
instead requiring telecommunications carriers to hold the data and respond to NSA queries for
data. The act also restored authorization for roving wiretaps and the tracking of lone wolf
terrorists
Organization for Economic Co-operation and Development for the Protection of Privacy and
Transborder Flows of Personal Data (OECD) - Answer Created a set of fair information
practices that are often held up as the model for organizations to adopt for the ethical
treatment of consumer data. International organization consisting of 35 countries
European Union Data Protection Directive - Answer Requires member countries to ensure
that data transferred to non-EU countries is protected. It also bars the export of data to
countries that do not have data privacy protection standards comparable to those of the EU,
included stopgap measure between EU and US
General Data Protection Regulation (GDPR) - Answer Addresses the export of personal data
outside the EU enabling citizens to see and correct their personal data, standardizing data
privacy regulations within the EU, and establishing substantial penalties for violation of its
guidelines
Questions and Answers.
Ethics - Answer A code of behavior that is defined by the group to which an individual
belongs
Morals - Answer The personal principles upon which an individual bases his or her decisions
about what is right and wrong
Foreign Corrupt Practices Act (FCPA) - Answer Makes it a crime to bribe a foreign official, a
foreign political party official, or a candidate for foreign political office
US-CERT - Answer A partnership between DHS and the public and private sectors that was
established to protect the nation's Internet infrastructure against cyberattacks by serving as a
clearinghouse for information on new viruses, worms, and other computer security topics
Internal Control - Answer the process established by an organization's board of directors,
managers, and IT group to provide reasonable assurance for the effectiveness and efficiency of
operations, the reliability of financial reporting, and compliance with applicable laws and
regulations.
Best achieved through separation of duties
Gramm-Leach-Bliley Act (GLBA) - Answer Established mandatory guidelines for the collection
and disclosure of personal financial information by financial institutions; requires financial
institutions to document their data security plans; and encourages institutions to implement
safeguards against pretexting
The Fair and Accurate Credit Transaction Act - Answer Allows consumers to request and
obtain a free credit report each year
Family Educational Rights and Privacy Act (FERPA) - Answer Provides students and their
parents with specific rights regarding the release of student records
Executive Order 12333 - Answer Defines the various government intelligence-gathering
agencies and defines what information can be collected, retained, and disseminated by the
agencies. It allows for the tangential collection of U.S. citizen data—even when those citizens
are not specifically targeted
, Electronic Communication Privacy Act (ECPA) - Answer 1) Protection of communication while
in transfer from sender to receiver
2) Protection of communications held in electronic storage
3) Prohibition of devices from recording, dialing, routing, addressing, and signaling information
without a search warrant
-Passed as an amendment to Wiretap Act
Title III of the Omnibus Crime Control and Safe Streets Act / Wiretap Act - Answer Regulates
interception of wire/telephone and oral communication. A warrant must be obtained from a
judge to conduct a wiretap, who can approve the warrant only if there is probable cause
Communications Assistance for Law Enforcement Act (CALEA) - Answer Requires the
telecommunications industry to build tools into its products that federal investigators can use—
after gaining a court order—to eavesdrop on conversations and intercept electronic
communications
USA Patriot Act - Answer Modified 15 existing statutes and gave sweeping new powers both
to domestic law enforcement and to international intelligence agencies, including increasing the
ability of law enforcement agencies to eavesdrop on telephone communication, intercept email
messages, and search medical, financial, and other records; the act also eased restrictions on
foreign intelligence gathering in the United States
USA Freedom Act - Answer Terminated the bulk collection of telephone metadata by the NSA
instead requiring telecommunications carriers to hold the data and respond to NSA queries for
data. The act also restored authorization for roving wiretaps and the tracking of lone wolf
terrorists
Organization for Economic Co-operation and Development for the Protection of Privacy and
Transborder Flows of Personal Data (OECD) - Answer Created a set of fair information
practices that are often held up as the model for organizations to adopt for the ethical
treatment of consumer data. International organization consisting of 35 countries
European Union Data Protection Directive - Answer Requires member countries to ensure
that data transferred to non-EU countries is protected. It also bars the export of data to
countries that do not have data privacy protection standards comparable to those of the EU,
included stopgap measure between EU and US
General Data Protection Regulation (GDPR) - Answer Addresses the export of personal data
outside the EU enabling citizens to see and correct their personal data, standardizing data
privacy regulations within the EU, and establishing substantial penalties for violation of its
guidelines
