WGU University WGU-QCO1 - Questions & Answers

Confidentiality ensures that only authorized personnel have access to sensitive information. Why Confidentiality Was Violated?
Payroll information is sensitive and should be accessible only to authorized employees.
The erroneous access granted to new hires means private financial information is at risk.
Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.
A. Availability ?Ensures systems remain operational, but this case concerns unauthorized access, not
system downtime.
B. Accessibility ?Relates to making data usable for authorized individuals, but this case involves an
unauthorized access issue.
C. Integrity ?Ensures data remains accurate and unaltered, but the issue here is privacy, not data
accuracy.
Why Not the Other Options?Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.
National Institute of Standards and Technology (NIST) Cybersecurity Framework.
ISO/IEC 27001: Information Security Management Systems.

The consultant was hired by the organization to test its cybersecurity and identify vulnerabilities. This is the role of a white hat hacker, also known as an ethical hacker. Why White Hat Hacker?
White hat hackers conduct security assessments legally and ethically to help organizations strengthen their cyber defenses.
The consultant demonstrated SQL injection attacks in a controlled manner to expose weaknesses without malicious intent.
Ethical hacking is a recognized practice under cybersecurity frameworks like NIST and ISO 27001.
A. Cybercriminal ?Engages in illegal hacking for personal or financial gain, whereas the consultant was
hired to help the organization.

C. Cyberterrorist ?Motivated by political or ideological goals, not cybersecurity testing.
D. Black Hat Hacker ?Malicious hackers who exploit vulnerabilities for personal benefit, unlike ethical
hackers.
Why Not the Other Options?Thus, the correct answer is B. White Hat Hacker, as the consultant was
conducting authorized penetration testing.
CEH (Certified Ethical Hacker) Guidelines.
National Institute of Standards and Technology (NIST) Cybersecurity Framework.
OWASP Top Ten Security Risks (2023).

The Software Engineering Code of Ethics and Professional Practice outlines principles that software engineers must follow to ensure ethical responsibility. Why Judgment?
The director is evaluating and updating a credit approval system to ensure ethical standards are met.
This aligns with the Judgment principle, which requires software engineers to apply ethical reasoning, fairness, and due diligence in system development.
Ethical judgment ensures that software systems do not introduce bias or unfair decision-making.
A. Management: Involves leadership responsibilities, but the focus here is ethical decision-making.
B. Colleagues: Covers professional relationships, not ethical system evaluation.
C. Self: Refers to continuous learning and improvement, which is not the core issue here.
Why Not the Other Options?Thus, the correct answer is D. Judgment, as it reflects ethical responsibility in software development.
Software Engineering Code of Ethics and Professional Practice, ACM & IEEE-CS.
Tavani,
H.
T. (2016). Ethics and Technology: Controversies, Questions, and Strategies for Ethical Computing.

A professional code of ethics provides a framework for ethical decision-making , guiding IT professionals in handling complex ethical dilemmas. By adopting an industry-standard ethical code, the company ensures that employees make principled decisions aligned with integrity, fairness, and responsibility.
ACM Code of Ethics & IEEE Code of Conduct ?Set guidelines for responsible and ethical IT practices.
Corporate Governance & Ethical Leadership ?Ethical guidelines help organizations avoid unethical behavior and reputational damage.
Deontological Ethics (Duty to Act Ethically) ?Professionals must uphold ethical standards regardless of financial incentives.
Utilitarian Ethics (Long-Term Trust & Stability) ?Ethical decision-making builds public confidence in IT companies.
Relevant Ethical References in Technology:Thus, the correct answer is A. Guidelines for principled decision-making , as a professional code of ethics helps IT professionals navigate ethical challenges.

Industrial espionage refers to the unauthorized theft or copying of trade secrets, proprietary information, or intellectual property from one company to another, often for competitive advantage.
Why is this Industrial Espionage?
The sibling stole proprietary source code from Employee A's unattended laptop.
This act provides unfair competitive advantage to the sibling's company.
Unauthorized access to trade secrets is illegal under the Economic Espionage Act (1996).
A. Nepotism ?Favoring family members in hiring or promotions, but this case involves theft of intellectual
property.
B. Conflict of Interest ?Would apply if Employee A voluntarily shared information, but here, it was stolen.
D. Corruption ?Involves bribery or unethical business practices, but this is corporate theft.
Why Not the Other Options?Thus, the correct answer is C. Industrial Espionage, as it involves theft of confidential trade secrets.
Economic Espionage Act (1996), 18 U.S.C. Ё 1831-1839.
OECD Guidelines on Corporate Ethics and Intellectual Property Protection.

A skewed sample occurs when historical data is biased, unrepresentative, or imbalanced , leading to discriminatory AI outcomes. In this case, the AI system was trained on 20 years of national data , which likely contained historical biases against minorities in drug and alcohol disorder treatments.
Since past law enforcement and healthcare policies have disproportionately impacted minority groups , the AI inherited these biases and began making unfair, discriminatory predictions.
Algorithmic Bias & AI Ethics (ACM/IEEE Guidelines) ?AI models must be trained on diverse and representative data.
Fairness in Machine Learning (FAT/ML Framework) ?Preventing bias in AI requires identifying and correcting skewed data.

Historical Bias & Systemic Discrimination ?Training AI on biased past records leads to unethical and discriminatory outcomes.
Deontological Ethics (Fair AI Decision-Making) ?AI developers must ensure unbiased, ethical, and fair AI outputs.
Relevant Ethical References in Technology:Thus, the correct answer is B. Skewed sample , as the AI model was trained on biased historical data, leading to discrimination.

Organizations must understand the distinction between ethical and legal decision-making frameworks to ensure responsible governance.
Ethical Decision-Making Frameworks:
Guide organizations in upholding moral standards and values.
Help navigate moral dilemmas where laws may not provide clear guidance.
Are based on societal values and professional codes of ethics (e.g., ACM Code of Ethics, IEEE Code of Conduct).
Legal Decision-Making Frameworks:
Provide a set of enforceable rules that dictate what is permissible and impermissible.
Help organizations comply with laws and regulations (e.g., GDPR, HIPAA, and consumer protection laws).
Ensure legal liability is minimized.
A & D: These options incorrectly suggest that legal and ethical frameworks are comprehensive guides for each other, which is false. Ethics go beyond legal rules, and legal decisions do not always ensure ethical behavior.
C: This reverses the correct roles of ethical and legal frameworks.
Why Not the Other Options?Thus, the best answer is B, as it correctly distinguishes the role of ethics and law in decision-making.
Moor, J. (1985). "What is Computer Ethics?" Metaphilosophy, 16(4), 266-275.
Floridi, L. (2013). The Ethics of Information. Oxford University Press.
IEEE Code of Ethics (2020).
General Data Protection Regulation (GDPR) (2018).

By publishing a professional code of ethics , a nonprofit society establishes ethical expectations , increasing public confidence in the profession. Ethical codes demonstrate a commitment to integrity, fairness, and responsible conduct , fostering public trust in professionals.
ACM & IEEE Codes of Ethics ?Promote ethical awareness and public accountability.
Corporate Social Responsibility (CSR) & Ethics in IT ?Organizations gain public trust by adopting ethical guidelines.
Virtue Ethics (Character & Reputation) ?A professional code reinforces moral credibility and public respect.
Stakeholder Theory (Freeman, 1984) ?Ethical practices benefit consumers, employees, and society.
Relevant Ethical References in Technology:Thus, the correct answer is B. Public trust and respect , as publishing a professional code of ethics reassures consumers and strengthens the profession's credibility.

Consumer profiling is the practice of collecting and analyzing consumer data --including demographic, geographic, and behavioral attributes --to optimize sales strategies, enhance marketing efforts, and personalize customer experiences. In this scenario, the organization gathers various types of customer data to improve its sales processes, which is a clear example of consumer profiling rather than surveillance or workplace monitoring.
Privacy and Data Ethics (GDPR, CCPA) ?Consumer profiling raises ethical concerns about informed consent, transparency, and data protection.
Big Data Ethics (Tene & Polonetsky, 2012) ?Ethical consumer profiling must ensure fair use, avoidance of bias, and non-discriminatory practices.
Utilitarian vs. Deontological Perspectives ?While profiling improves customer experiences , it must not violate privacy rights or enable unethical targeting.
ACM Code of Ethics ?Encourages responsible collection, use, and protection of consumer data.
Relevant Ethical References in Technology:Thus, since the company is gathering consumer data to optimize sales , the correct answer is D. Consumer profiling.

ISO 9001 is the international standard for quality management systems (QMS). Organizations use ISO 9001 certification to demonstrate their ability to meet quality standards and regulatory requirements in manufacturing and processes. Since the company wants to prove quality standards for its computerized manufacturing system , ISO 9001 is the correct certification to pursue.

ISO 9001 (Quality Management Systems) ?Establishes global best practices for manufacturing quality assurance.
Corporate Social Responsibility (CSR) & Ethics ?Ensures transparent and consistent quality standards in production.
Deontological Ethics (Duty to Deliver Quality Products) ?Organizations must prioritize quality and reliability in manufacturing.
Consumer Protection & Ethical Manufacturing ?Ethical businesses adhere to recognized quality standards to protect consumers.
Relevant Ethical References in Technology:Thus, the correct answer is A. ISO 9001 , as it focuses on quality assurance and process improvement.