Question 1

The Department of Homeland Security works with academic campuses nationally, focusing on resilience, recruitment, internationalization, growing academic maturity, and academic research.

Accepted Answer

The Department of Homeland Security has programs and initiatives aimed at collaborating with academic institutions on various areas, including resilience, recruitment, internationalization, academic research, and maturity. These efforts promote security awareness and preparedness in educational settings while also fostering academic excellence and innovation.

Question 2

The difference between a policy and a law is that ignorance of a law is an acceptable defense.

Accepted Answer

Ignorance of a law is not an acceptable defense. However, ignorance of a policy may be considered as a defense in certain situations.

Question 3

Studies on ethics and computer use reveal that people of different nationalities have different perspectives; difficulties arise when one nationality's ethical behavior violates the ethics of another national group.

Accepted Answer

This is true. Cultural and societal norms vary between different regions and can lead to differences in opinions on what is considered ethical or unethical behavior. This can create challenges in cross-cultural communication and collaboration in the field of computer science.

Question 4

Since it was established in January 2001, every FBI field office has started an InfraGard program to collaborate with public and private organizations and the academic community.

Accepted Answer

The statement is true.

Question 5

In the context of information security, confidentiality is the right of individuals or groups to protect themselves and their information from unauthorized access.

Accepted Answer

The answer of In the context of information security, confidentiality...

Question 6

The key difference between laws and ethics is that ethics carry the authority of a governing body and laws do not.

Accepted Answer

The statement is incorrect. Laws do carry the authority of a governing body, whereas ethics are based on personal or societal beliefs and values, and do not necessarily have legal consequences.

Question 7

Due care and due diligence require that an organization make a valid effort to protect others and continually maintain this level of effort, ensuring these actions are effective.

Accepted Answer

Due care and due diligence both require an organization to make a valid effort to protect others and maintain this effort continuously, ensuring that the actions are effective.

Question 8

The Computer Security Act of 1987 is the cornerstone of many computer-related federal laws and enforcement efforts; it was originally written as an extension and clarification of the Comprehensive Crime Control Act of 1984.

Accepted Answer

The Computer Security Act of 1987 was not an extension of the Comprehensive Crime Control Act of 1984; it was enacted to improve the security and privacy of sensitive information in federal computer systems.

Question 9

The United States has implemented a version of the DMCA law called the Database Right, in order to comply with Directive 95/46/EC.

Accepted Answer

The Database Right is a European Union law, not a US law. The US has implemented copyright laws that include provisions similar to those in the DMCA, but not the Database Right.

Question 10

The Council of Europe Convention on Cybercrime has not been well received by advocates of intellectual property rights because it de-emphasizes prosecution for copyright infringement, but it has been well received by supporters of individual rights in the United States.

Accepted Answer

The statement is incorrect. The Council of Europe Convention on Cybercrime is generally well-received by both advocates of intellectual property rights and supporters of individual rights in the United States, as it includes provisions for prosecuting copyright infringement as well as other cybercrimes.

Question 11

Individuals with authorization and privileges to manage information within the organization are most likely to cause harm or damage by accident.

Accepted Answer

This statement is true. Studies have shown that unintentional errors or mistakes made by authorized personnel is one of the leading causes of data breaches or incidents within an organization. This can be due to lack of training, negligence, or human error.

Question 12

Laws, policies, and their associated penalties only provide deterrence if offenders fear the penalty, expect to be caught, and expect the penalty to be applied if they are caught.

Accepted Answer

Laws, policies, and penalties will not have a deterrent effect if offenders do not fear the penalty, do not expect to be caught, or do not expect the penalty to be applied if caught. Deterrence theory suggests that the severity, certainty, and celerity of the penalty are factors that influence the deterrent effect.

Question 13

The Department of Homeland Security is the only U.S. federal agency charged with the protection of American information resources and the investigation of threats to, or attacks on, those resources.

Accepted Answer

The Department of Homeland Security is responsible for the protection and security of the homeland from threats and hazards, but the primary federal agency charged with the protection of American information resources is the Cybersecurity and Infrastructure Security Agency (CISA).

Question 14

Cultural differences can make it difficult to determine what is ethical and not ethical between cultures, except when it comes to the use of computers, where ethics are considered universal.

Accepted Answer

Cultural differences can also affect what is considered ethical in the use of computers. For example, the use of pirated software may be more accepted in some countries than in others. Therefore, it is important to consider cultural context when determining ethical behaviors regarding technology.

Question 15

The Secret Service is charged with safeguarding the nation's financial infrastructure and payments systems to preserve the integrity of the economy.

Accepted Answer

This statement is true according to the responsibilities listed on the official website of the Secret Service. They have a role in protecting the nation's financial infrastructure and payments systems to prevent economic crimes such as counterfeiting, forgery, and financial fraud.

Question 16

Criminal laws address activities and conduct harmful to society and is categorized as private or public.

Accepted Answer

Criminal laws are designed to address activities and conduct that are considered harmful to society. These laws are classified as either private or public depending on the nature of the offense and who it affects. Private crimes involve harm to individuals or their property, such as assault or theft. Public crimes involve harm to society as a whole, such as drug trafficking or murder.

Question 17

Employees are not deterred by the potential loss of certification or professional accreditation resulting from a breach of a code of conduct, because this loss has no effect on employees' marketability and earning power.

Accepted Answer

The statement is false. Losing certification or professional accreditation can affect employees' marketability and earning power, as it may limit job opportunities and salary potential in their field.

Question 18

For policy to become enforceable, it only needs to be distributed, read, understood, and agreed to.

Accepted Answer

For policy to become enforceable, it not only needs to be distributed, read, understood, and agreed to, but it also needs to be implemented and monitored for compliance. Enforcement mechanisms must be in place to ensure that the policy is being followed and that those who violate it are held accountable.

Question 19

The NSA is responsible for signal intelligence, information assurance products and services, and enabling computer network operations to gain a decision advantage for the United States and its allies under all circumstances.

Accepted Answer

This statement is true. According to the official NSA website (nsa.gov), the NSA is responsible for signal intelligence, information assurance products and services, and enabling computer network operations to gain a decision advantage for the United States and its allies under all circumstances.

Question 20

Unethical and illegal behavior is generally caused by ignorance (of policy and/or the law), by accident, and by inadequate protection mechanisms.

Accepted Answer

Unethical and illegal behavior can be caused by a variety of factors, including intentional actions, lack of moral or ethical values, greed, and disregard for the well-being of others. While ignorance, accidents, and inadequate protection mechanisms can contribute to unethical or illegal behavior, they do not solely cause it.

Quiz 3: Legal, Ethical, and Professional Issues in Information Security