Ethics-In-Technology WGU Ethics In Technology QCO1 Free Practice Exam Questions (2025 Updated)

Industrial espionage refers to the unauthorized theft or copying of trade secrets, proprietary information, or intellectual property from one company to another, often to gain a competitive advantage.

Why is this Industrial Espionage?

The sibling stole proprietary source code from Employee A’s laptop.

This act provides unfair competitive advantage to the sibling’s company.

Unauthorized access to trade secrets violates legal and ethical standards (e.g., Economic Espionage Act).

A. Nepotism – Favoring family members in hiring or promotions, but this case involves theft.

B. Conflict of Interest – Would apply if Employee A voluntarily shared information, but here, it was stolen.

D. Corruption – Involves bribery or unethical business practices but does not specifically relate to corporate theft.

Why Not the Other Options?Thus, the correct answer is C. Industrial Espionage, as it involves theft of confidential trade secrets.

Economic Espionage Act (1996), 18 U.S.C. §§ 1831-1839.

OECD Guidelines on Corporate Ethics and Intellectual Property Protection.

References in Ethics in Technology:

Under the Foreign Intelligence Surveillance Act (FISA), the FBI can monitor communications without a warrant if both parties are non-U.S. citizens and the surveillance is conducted for intelligence purposes.

However, if one or both parties are U.S. citizens, the FBI would typically require a warrant under FISA or a separate court authorization, even in a short-term investigation.

FISA (1978) & Patriot Act (2001) – Provide legal authority for surveillance but impose restrictions on monitoring U.S. citizens.

Fourth Amendment (Privacy Rights) – Prevents warrantless wiretapping of U.S. citizens except in national security cases.

Snowden Leaks (2013) & Mass Surveillance Ethics – Raised concerns over the overreach of intelligence agencies in digital surveillance.

Deontological Ethics (Right to Privacy vs. National Security) – Governments must balance security concerns with individual privacy rights.

Relevant Ethical References in Technology:Thus, the correct answer is A. Calls between two non-U.S. citizens, as FISA allows warrantless surveillance in such cases.

Under the General Data Protection Regulation (GDPR), organizations are required to store personal data only for as long as necessary and must securely erase or anonymize data once it is no longer needed for its original purpose.

This aligns with GDPR’s "Storage Limitation Principle" (Article 5(1)(e)), which mandates that data should be:

Kept only for as long as necessary for processing purposes

Deleted or anonymized when no longer required

Stored securely to prevent unauthorized access

GDPR Compliance (Article 5: Principles of Processing Personal Data) – Enforces storage limitation and secure erasure.

Data Ethics (Fair and Responsible Use of Personal Data) – Ethical obligation to limit storage and prevent misuse.

Privacy by Design (Cavoukian, 1995) – Encourages secure deletion of unnecessary data.

Utilitarian Ethics & Data Protection – Secure erasure prevents potential misuse and data breaches.

Relevant Ethical References in Technology:Thus, the correct answer is D. Securely erasing data that is no longer needed, as it complies with GDPR storage limitation requirements.

Proxy discrimination occurs when a seemingly neutral variable (e.g., zip code) serves as a proxy for a protected characteristic, such as race, gender, or socioeconomic status. In this case, the AI uses zip codes to determine learning support for racial segments, introducing unintentional racial bias because zip codes often reflect historical segregation and economic disparities.

Since historical housing policies (e.g., redlining) led to racial and economic segregation, using zip codes as a decision factor unfairly correlates race with access to educational resources—a classic example of proxy discrimination.

Algorithmic Bias & Fairness (FAT/ML Guidelines) – AI systems must avoid using proxies that reinforce systemic discrimination.

Civil Rights Laws (Fair Housing Act, Title VI of the Civil Rights Act) – Policies that disproportionately harm racial groups violate anti-discrimination laws.

ACM & IEEE Ethics in AI – Developers must mitigate biases in AI models that result in unfair treatment.

Deontological Ethics & Fairness – AI systems should not perpetuate historical biases through indirect discrimination.

Relevant Ethical References in Technology:Thus, the correct answer is C. Proxy discrimination, as zip codes indirectly introduce racial bias into the AI system.

Confidentiality ensures that only authorized personnel have access to sensitive information.

Why Confidentiality Was Violated?

Payroll information is sensitive and should be accessible only to authorized employees.

The erroneous access granted to new hires means private financial information is at risk.

Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.

A. Availability – Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.

B. Accessibility – Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.

C. Integrity – Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.

Why Not the Other Options?Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

ISO/IEC 27001: Information Security Management Systems.

References in Ethics in Technology:

The OECD Privacy Guidelines establish principles for protecting personal data, and Individual Participation is the principle that grants individuals the right to:

Access their personal data

Challenge incorrect data

Request corrections to inaccurate information

This ensures transparency and gives individuals control over their own information.

B. Purpose Specification – Requires data collection to have a clear, specific purpose, but does not grant individuals the right to review their data.

C. Use Limitation – Limits how collected data can be used but does not focus on individual rights.

D. Security Safeguard – Ensures data protection measures but does not relate to individuals reviewing their data.

Why Not the Other Options?Thus, the correct answer is A. Individual participation, as it upholds the right to access and correct personal information.

OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data (1980, updated 2013).

General Data Protection Regulation (GDPR) (2018), Articles 15-16.

Solove, D. J. (2020). Understanding Privacy. Harvard University Press.

References in Ethics in Technology:

MYSTIC is a secret NSA surveillance program used to intercept and record telephone conversations in multiple non-U.S. countries. The program was revealed in 2014 by Edward Snowden and reportedly enabled full audio recording of phone calls in certain nations.

MYSTIC’s ethical concerns stem from mass surveillance, privacy violations, and the lack of transparency in government data collection.

Mass Surveillance Ethics (Snowden Leaks, 2013–2014) – Revealed NSA’s large-scale digital surveillance programs, including PRISM and MYSTIC.

Privacy & Government Surveillance (Fourth Amendment & FISA) – Raises concerns about warrantless surveillance of foreign citizens.

Utilitarian vs. Deontological Ethics – Justifications for national security must balance against individual privacy rights.

International Human Rights (UN Privacy Guidelines) – Warrantless global surveillance challenges privacy rights under international law.

Relevant Ethical References in Technology:Thus, the correct answer is C. MYSTIC, as it was used by the NSA to intercept and record telephone conversations in non-U.S. countries.

Agile development is a flexible, iterative approach to software development that allows continuous testing, feedback, and adjustments. In this scenario, the organization is developing a consumer-profiling tool and has concerns about its ability to accurately capture and process data. By using an iterative approach, the team ensures that the software is continuously refined and improved.

This contrasts with Waterfall development (which follows a linear, step-by-step approach without iteration) and quality assurance (which is a process within development, not a methodology itself).

Agile Manifesto (2001) – Emphasizes iterative development, collaboration, and continuous improvement.

Ethical Software Development (IEEE/ACM Standards) – Encourages adaptive methodologies to ensure fairness, accuracy, and responsible AI.

Privacy by Design (GDPR, Cavoukian, 1995) – Agile allows real-time testing and mitigation of data privacy risks.

Utilitarian Ethics in Software Engineering – Agile development maximizes benefits by improving software accuracy and efficiency.

Relevant Ethical References in Technology:Thus, the correct answer is D. Agile development, as it supports continuous testing and adjustment of software capabilities.

The Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA) allows consumers to control how their personal financial information is shared through an opt-out mechanism.

Why is "Opt-Out" a Threat to Data Privacy?

The opt-out model assumes that consumers consent to having their data shared unless they take action to refuse.

Many consumers may not be aware of their right to opt-out, leading to widespread data sharing without explicit consent.

This is less privacy-protective than an opt-in model, where consumers must actively give permission before their data is shared.

A. Opt-in – This would enhance privacy, not threaten it.

B. Safeguard – Refers to data security, not data-sharing policies.

D. Pretexting – Involves fraudulent access to financial data, which is a different issue.

Why Not the Other Options?Thus, the correct answer is C. Opt-out, as it weakens consumer privacy protections by allowing data sharing unless the consumer takes action.

Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809.

Federal Trade Commission (FTC) Guide to GLBA Opt-Out Provisions.

Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life.

References in Ethics in Technology:

Doxing (or doxxing) refers to maliciously gathering and publishing personal information online without consent, often to harass, threaten, or retaliate against someone. In this scenario, the hacker stole an employee's health records and posted them online as revenge, which clearly constitutes doxing.

Privacy Rights & Data Protection (HIPAA, GDPR, CCPA) – Unauthorized disclosure of health records violates legal and ethical privacy standards.

Cyber Ethics & Harassment (ACM & IEEE Codes of Ethics) – Doxing is considered a cybercrime and an unethical digital practice.

Cybersecurity & Retaliatory Attacks – Ethical hacking principles condemn doxing as a form of online harassment.

Deontological & Virtue Ethics – Publishing private information violates personal dignity and trust, making it ethically unacceptable.

Relevant Ethical References in Technology:Thus, the correct answer is B. Doxing, as the hacker exposed private health records online for revenge.

Virtue ethics focuses on the moral character of individuals rather than just the consequences or rules governing their actions. In this scenario, a game designer is concerned about how their participation in the game development process will reflect upon their moral character, which is a hallmark of virtue ethics.

Virtue ethics, as developed by Aristotle, emphasizes traits like honesty, integrity, and compassion. The designer is questioning whether contributing to a game that rewards violent or unlawful acts aligns with virtues such as responsibility and ethical integrity. This aligns with virtue ethics' central question: What kind of person should I be? rather than What rules should I follow? or What consequences will my actions have?

Virtue Ethics (Aristotle's Ethics) – This ethical theory asks whether designing a game that rewards violent behavior aligns with good moral character.

Ethics of Representation in Media and Gaming – Studies have shown that media can influence real-world behaviors, raising ethical concerns about glorifying violence.

Industry Standards (ESRB, PEGI) – While rating systems classify content, ethical concerns go beyond ratings to the moral responsibility of developers in shaping digital culture.

Moral Identity in Design – Developers must consider whether creating certain game mechanics aligns with their personal and professional ethical identity.

Relevant Ethical References in Technology:Thus, the designer's concerns reflect virtue ethics by focusing on their personal integrity and professional responsibility in game development.

A John Doe lawsuit is a legal action filed against an anonymous or unknown defendant. In this case, the university is suing a student who posted negative comments anonymously, meaning the identity of the defendant is not yet known.

John Doe lawsuits are commonly used in defamation cases, copyright disputes, and online anonymity issues where plaintiffs seek to unmask anonymous individuals.

Freedom of Speech vs. Defamation (First Amendment) – Balances anonymity rights with protection against false or damaging statements.

Digital Ethics & Anonymity – Ethical concerns arise when institutions use lawsuits to silence critics rather than address legitimate concerns.

ACM & IEEE Ethics – Encourage fair use of digital rights while discouraging online harassment and false accusations.

Strategic Lawsuits vs. Free Speech (SLAPP vs. Anti-SLAPP) – A John Doe lawsuit could be used unethically to suppress criticism.

Relevant Ethical References in Technology:Thus, the correct answer is D. John Doe lawsuit, as the university is suing an anonymous individual.

Confidentiality ensures that only authorized personnel have access to sensitive information.

Why Confidentiality Was Violated?

Payroll information is sensitive and should be accessible only to authorized employees.

The erroneous access granted to new hires means private financial information is at risk.

Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.

A. Availability – Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.

B. Accessibility – Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.

C. Integrity – Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.

Why Not the Other Options?Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

ISO/IEC 27001: Information Security Management Systems.

References in Ethics in Technology:

Adherence to a professional code of ethics ensures that individuals, their profession, and society benefit from ethical consistency and industry best practices.

1. Standardized Business Practices:

Ethical codes establish clear guidelines for professional conduct.

They promote fairness, transparency, and accountability in business.

2. Consistent Decision-Making:

A well-defined ethical framework helps professionals make fair and ethical choices in various situations.

Ensures uniform application of ethical principles across different cases.

C. Assured Employer Integrity: Ethics applies to individual conduct rather than guaranteeing an employer's behavior.

D. Faster Career Advancement: Ethical behavior may help long-term career growth, but it is not a guaranteed outcome.

Why Not the Other Options?Thus, the correct answers are A. Standardized business practices and B. Consistent decision-making.

ACM Code of Ethics and Professional Conduct.

IEEE Code of Ethics (2020).

References in Ethics in Technology:

Computerized Provider Order Entry (CPOE) is a digital system that allows healthcare providers to enter medication orders electronically, significantly reducing medication errors.

Why CPOE?

Eliminates handwriting-related errors from illegible prescriptions.

Ensures complete medication details before processing.

Often integrates with decision support tools to flag incorrect dosages and drug interactions.

B. Health Information Exchange (HIE): Facilitates data sharing between healthcare providers but does not focus on preventing medication errors.

C. Electronic Medical Record (EMR): Stores patient data but does not address prescription-related errors directly.

D. Clinical Decision Support (CDS): Assists providers in making clinical decisions but does not replace the ordering process like CPOE.

Why Not the Other Options?Thus, the correct answer is A. Computerized Provider Order Entry (CPOE) because it directly prevents prescription errors caused by illegible handwriting or incomplete data.

Bates, D. W. et al. (1998). Effect of Computerized Physician Order Entry and a Team Intervention on Prevention of Serious Medication Errors.

Institute of Medicine (2000). To Err is Human: Building a Safer Health System.

References in Ethics in Technology:

Consumer profiling is the practice of collecting and analyzing consumer data—including demographic, geographic, and behavioral attributes—to optimize sales strategies, enhance marketing efforts, and personalize customer experiences.

In this scenario, the organization gathers various types of customer data to improve its sales processes, which is a clear example of consumer profiling rather than surveillance or workplace monitoring.

Privacy and Data Ethics (GDPR, CCPA) – Consumer profiling raises ethical concerns about informed consent, transparency, and data protection.

Big Data Ethics (Tene & Polonetsky, 2012) – Ethical consumer profiling must ensure fair use, avoidance of bias, and non-discriminatory practices.

Utilitarian vs. Deontological Perspectives – While profiling improves customer experiences, it must not violate privacy rights or enable unethical targeting.

ACM Code of Ethics – Encourages responsible collection, use, and protection of consumer data.

Relevant Ethical References in Technology:Thus, since the company is gathering consumer data to optimize sales, the correct answer is D. Consumer profiling.

The intensive care specialist acts with good intent (saving the patient’s life) but violates privacy laws in the process.

Why is this ethical?

The doctor prioritizes the patient's life and well-being, which aligns with the ethical principle of beneficence (doing good).

The action follows utilitarian ethics, where breaking a rule is justified if it results in a greater moral good (saving a life).

Why is this illegal?

Bypassing privacy protections (e.g., HIPAA, GDPR) violates legal and regulatory standards concerning patient data.

Medical institutions require proper authorization to access patient records, even in emergencies.

A. Unethical and Legal: The action is not unethical because the intention is to save a life.

B. Unethical and Illegal: The action is illegal but not unethical, as it prioritizes the patient’s survival.

C. Ethical and Legal: While ethical, privacy laws are still broken, making it illegal.

Why Not the Other Options?Thus, the correct answer is D. Ethical and Illegal, as the doctor acts ethically but violates privacy laws in the process.

Beauchamp, T., & Childress, J. (2019). Principles of Biomedical Ethics. Oxford University Press.

General Data Protection Regulation (GDPR) (2018).

Health Insurance Portability and Accountability Act (HIPAA) (1996).

Tavani, H. T. (2016). Ethics and Technology: Controversies, Questions, and Strategies for Ethical Computing.

References in Ethics in Technology:

Cyberterrorism refers to the use of digital attacks to cause significant harm to critical infrastructure, government systems, or the public for political, ideological, or religious reasons. In this case, hackers manipulated data to disable a national energy infrastructure, which classifies as cyberterrorism since it causes disruption with potentially life-threatening consequences.

Unlike cyberespionage (spying for intelligence gathering) or an advanced persistent threat (APT, which is typically long-term data theft), cyberterrorism aims to instill fear, cause disruption, and further political agendas.

Cybersecurity Ethics & National Security – Protecting critical infrastructure from malicious attacks is an ethical obligation under cybersecurity policies.

Computer Fraud and Abuse Act (CFAA, 1986) – Criminalizes hacking attempts against government and national infrastructure.

Utilitarian Ethics (Greatest Harm Principle) – Cyberterrorism has no ethical justification due to its potential harm to innocent civilians.

ACM & IEEE Ethical Standards – Encourage responsible cybersecurity practices to prevent malicious attacks on infrastructure.

Relevant Ethical References in Technology:Thus, the correct answer is B. Cyberterrorism, as the attack targets national infrastructure for political goals.