AMERICAN PUBLIC UNIVERSITY SYSTEM
School of STEM & Information Technology | Course Examination Catalog
ISSC697: Information Systems Security Capstone — Fall 2026 Final Examination
Course Code: ISSC697 Term: Fall 2026 Semester Time Allowed: 180 Minutes (3 Hours)
Question Type: Multiple Choice (A, B, Exam Total Score: Out of 100 Points
Total Questions: 20 Questions C, D) (5 Pts Each)
EXAMINATION INSTRUCTIONS & RULES: Answer all twenty (20) multiple-choice questions below. Each question carries
exactly 5 points, making the exam out of 100 total points. All questions are derived strictly from the ISSC697 required literature
on Internet of Things (IoT) in healthcare delivery. For candidate evaluation and answer auditing, each question includes the
verified correct answer marked with a green tick (✔ Correct Answer) and an official lecturer rationale formatted in yellow
background panels.
Question 1: Based on Hsu & Lin (2018), which set of constructs within the Value-based Adoption
Model (VAM) determines user perceived value and behavioral intention to adopt Internet of
Things (IoT) services?
A) Perceived utility and perceived enjoyment act as perceived benefits, while perceived privacy risk and costs
act as perceived drawbacks.
B) Perceived security acts as the sole determinant of adoption, disregarding enjoyment or cost structures.
C) Financial return on investment is the only construct evaluated within the model's internal limit.
D) Hardware processing speed and network bandwidth are the primary variance constructs.
✔ Correct Answer: Option A (Perceived utility and perceived enjoyment act as perceived benefits, while
perceived privacy risk and costs act as perceived drawbacks.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Hsu & Lin (2018) apply the Value-based Adoption Model (VAM) to investigate IoT
service adoption. The theoretical framework identifies perceived benefits (perceived utility and enjoyment) and perceived
drawbacks/sacrifices (perceived privacy risk and financial costs) as the core constructs influencing perceived value and
behavioral intention to adopt.
Confidential — Official University Examination Paper (Fall 2026 Catalog) Page 1
, AMERICAN PUBLIC UNIVERSITY SYSTEM — ISSC697 FALL 2026 FINAL EXAM COURSE EXAM CATALOG: 100 POINTS
Question 2: According to the systematic review by Brous, Janssen, & Herder (2020), what
characterises the 'dual effects' and dual technology perspective of IoT adoption within
organisations?
A) Adoption creates immediate financial gains without altering organizational culture.
B) Organizational risks are entirely predictable and eliminated prior to deployment.
C) Technology adoption affects only physical asset management without impacting processes or systems.
D) IoT adoption delivers intended benefits but also requires unplanned structural changes and brings
unanticipated risks.
✔ Correct Answer: Option D (IoT adoption delivers intended benefits but also requires unplanned
structural changes and brings unanticipated risks.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Brous et al. (2020) state that while organisations decide to adopt IoT because they
anticipate general operational benefits, realizing these benefits requires unplanned structural organizational changes and
exposes the business to unexpected operational and security risks.
Question 3: How does Ferguson (2016) conceptualise the constitutional challenge posed by
networked 'smart objects' under the Fourth Amendment's protection of 'effects'?
A) Smart objects are passive targets that do not generate or share data autonomously.
B) Networked smart devices continuously generate and share data, challenging the constitutional focus on
'effects'.
C) Smart objects create a static environment where search and seizure law requires no adaptation.
D) The Fourth Amendment strictly regulates international network bandwidth rather than personal effects.
✔ Correct Answer: Option B (Networked smart devices continuously generate and share data,
challenging the constitutional focus on 'effects'.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Ferguson (2016) argues that smart devices shift physical personal property ('effects')
from passive, inert items to active data-generating and sharing nodes, creating new legal challenges for Fourth Amendment
protections regarding unreasonable search and seizure.
Confidential — Official University Examination Paper (Fall 2026 Catalog) Page 2
School of STEM & Information Technology | Course Examination Catalog
ISSC697: Information Systems Security Capstone — Fall 2026 Final Examination
Course Code: ISSC697 Term: Fall 2026 Semester Time Allowed: 180 Minutes (3 Hours)
Question Type: Multiple Choice (A, B, Exam Total Score: Out of 100 Points
Total Questions: 20 Questions C, D) (5 Pts Each)
EXAMINATION INSTRUCTIONS & RULES: Answer all twenty (20) multiple-choice questions below. Each question carries
exactly 5 points, making the exam out of 100 total points. All questions are derived strictly from the ISSC697 required literature
on Internet of Things (IoT) in healthcare delivery. For candidate evaluation and answer auditing, each question includes the
verified correct answer marked with a green tick (✔ Correct Answer) and an official lecturer rationale formatted in yellow
background panels.
Question 1: Based on Hsu & Lin (2018), which set of constructs within the Value-based Adoption
Model (VAM) determines user perceived value and behavioral intention to adopt Internet of
Things (IoT) services?
A) Perceived utility and perceived enjoyment act as perceived benefits, while perceived privacy risk and costs
act as perceived drawbacks.
B) Perceived security acts as the sole determinant of adoption, disregarding enjoyment or cost structures.
C) Financial return on investment is the only construct evaluated within the model's internal limit.
D) Hardware processing speed and network bandwidth are the primary variance constructs.
✔ Correct Answer: Option A (Perceived utility and perceived enjoyment act as perceived benefits, while
perceived privacy risk and costs act as perceived drawbacks.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Hsu & Lin (2018) apply the Value-based Adoption Model (VAM) to investigate IoT
service adoption. The theoretical framework identifies perceived benefits (perceived utility and enjoyment) and perceived
drawbacks/sacrifices (perceived privacy risk and financial costs) as the core constructs influencing perceived value and
behavioral intention to adopt.
Confidential — Official University Examination Paper (Fall 2026 Catalog) Page 1
, AMERICAN PUBLIC UNIVERSITY SYSTEM — ISSC697 FALL 2026 FINAL EXAM COURSE EXAM CATALOG: 100 POINTS
Question 2: According to the systematic review by Brous, Janssen, & Herder (2020), what
characterises the 'dual effects' and dual technology perspective of IoT adoption within
organisations?
A) Adoption creates immediate financial gains without altering organizational culture.
B) Organizational risks are entirely predictable and eliminated prior to deployment.
C) Technology adoption affects only physical asset management without impacting processes or systems.
D) IoT adoption delivers intended benefits but also requires unplanned structural changes and brings
unanticipated risks.
✔ Correct Answer: Option D (IoT adoption delivers intended benefits but also requires unplanned
structural changes and brings unanticipated risks.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Brous et al. (2020) state that while organisations decide to adopt IoT because they
anticipate general operational benefits, realizing these benefits requires unplanned structural organizational changes and
exposes the business to unexpected operational and security risks.
Question 3: How does Ferguson (2016) conceptualise the constitutional challenge posed by
networked 'smart objects' under the Fourth Amendment's protection of 'effects'?
A) Smart objects are passive targets that do not generate or share data autonomously.
B) Networked smart devices continuously generate and share data, challenging the constitutional focus on
'effects'.
C) Smart objects create a static environment where search and seizure law requires no adaptation.
D) The Fourth Amendment strictly regulates international network bandwidth rather than personal effects.
✔ Correct Answer: Option B (Networked smart devices continuously generate and share data,
challenging the constitutional focus on 'effects'.)
Official Rationale (Fall 2026 Examination Audit):
Rationale (Fall 2026 Examination): Ferguson (2016) argues that smart devices shift physical personal property ('effects')
from passive, inert items to active data-generating and sharing nodes, creating new legal challenges for Fourth Amendment
protections regarding unreasonable search and seizure.
Confidential — Official University Examination Paper (Fall 2026 Catalog) Page 2
