Free Practice Questions for the WGU Courses and Certificates Ethics-In-Technology Exam (2026 Updated)

A John Doe lawsuit is a legal action filed against an anonymous or unknown defendant . In this case, the university is suing a student who posted negative comments anonymously , meaning the identity of the defendant is not yet known .

John Doe lawsuits are commonly used in defamation cases , copyright disputes, and online anonymity issues where plaintiffs seek to unmask anonymous individuals .

Freedom of Speech vs. Defamation (First Amendment) – Balances anonymity rights with protection against false or damaging statements .

Digital Ethics & Anonymity – Ethical concerns arise when institutions use lawsuits to silence critics rather than address legitimate concerns .

ACM & IEEE Ethics – Encourage fair use of digital rights while discouraging online harassment and false accusations .

Strategic Lawsuits vs. Free Speech (SLAPP vs. Anti-SLAPP) – A John Doe lawsuit could be used unethically to suppress criticism .

Relevant Ethical References in Technology: Thus, the correct answer is D. John Doe lawsuit , as the university is suing an anonymous individual.

The fair use doctrine allows limited use of copyrighted material without permission from the copyright owner under specific conditions.

Why Fair Use Applies in This Case?

The search engine indexes and displays short excerpts from copyrighted websites.

Courts have ruled that search engine indexing and snippet display is transformative and falls under fair use ( Authors Guild v. Google, 2015 ).

The purpose is informational and beneficial to the public , which aligns with fair use principles.

A. Safe Harbor – Protects online platforms from liability for user-uploaded content (not applicable to search indexing).

B. First Sale – Allows reselling legally purchased copyrighted material but does not apply to digital reproduction.

C. Derivative Work – Involves modifying copyrighted content into a new form (e.g., movie adaptation of a book), which is not the case here.

Why Not the Other Options? Thus, the correct answer is D. Fair use , as it permits limited reproduction for indexing and search purposes .

Authors Guild v. Google, Inc., 804 F.3d 202 (2d Cir. 2015).

U.S. Copyright Act, 17 U.S.C. § 107 (Fair Use) .

Lessig, L. (2004). Free Culture: How Big Media Uses Technology and the Law to Lock Down Culture and Control Creativity .

References in Ethics in Technology:

A white hat hacker is an ethical cybersecurity specialist hired to test an organization’s security infrastructure and identify vulnerabilities before malicious attackers exploit them. Unlike black hat hackers (who engage in illegal activities) , white hat hackers operate within legal and ethical boundaries to strengthen cybersecurity defenses .

In this scenario, the company hires a specialist to test security systems for vulnerabilities , which aligns with the role of a white hat hacker or ethical hacker .

Ethical Hacking & Cybersecurity (CEH Certification) – Ethical hackers conduct penetration testing to identify weaknesses.

Computer Fraud and Abuse Act (CFAA, 1986) – Authorizes legal hacking for security testing purposes .

ACM & IEEE Ethical Standards – Ethical hacking must follow responsible disclosure and legal guidelines .

Utilitarian Ethics (Greatest Good Principle) – Ethical hacking prevents cyberattacks , benefiting organizations and society.

Relevant Ethical References in Technology: Thus, the correct answer is B. White hat hacker , as the specialist is legally testing security vulnerabilities.

Under the Foreign Intelligence Surveillance Act (FISA) , the FBI can monitor communications without a warrant if both parties are non-U.S. citizens and the surveillance is conducted for intelligence purposes .

However, if one or both parties are U.S. citizens , the FBI would typically require a warrant under FISA or a separate court authorization , even in a short-term investigation.

FISA (1978) & Patriot Act (2001) – Provide legal authority for surveillance but impose restrictions on monitoring U.S. citizens .

Fourth Amendment (Privacy Rights) – Prevents warrantless wiretapping of U.S. citizens except in national security cases .

Snowden Leaks (2013) & Mass Surveillance Ethics – Raised concerns over the overreach of intelligence agencies in digital surveillance .

Deontological Ethics (Right to Privacy vs. National Security) – Governments must balance security concerns with individual privacy rights .

Relevant Ethical References in Technology: Thus, the correct answer is A. Calls between two non-U.S. citizens , as FISA allows warrantless surveillance in such cases.

The Fourth Amendment to the U.S. Constitution protects individuals from unreasonable searches and seizures by the government or entities acting in ways that violate privacy rights. When a social media platform collects microphone data without explicit consent , it potentially infringes on users’ reasonable expectation of privacy , raising Fourth Amendment concerns .

While the Fourth Amendment traditionally applies to government actions, legal debates have emerged over whether private companies collecting excessive personal data should be subject to similar scrutiny under privacy laws and regulations such as the Electronic Communications Privacy Act (ECPA) and the Stored Communications Act (SCA) .

Fourth Amendment & Digital Privacy (Carpenter v. United States, 2018) – The U.S. Supreme Court ruled that warrantless collection of personal digital data can violate the Fourth Amendment .

Ethical Data Collection & Consent (GDPR, CCPA) – Using microphone data without user consent is ethically and legally questionable.

Big Tech & Surveillance Ethics – Ethical concerns arise when tech companies engage in excessive data collection without transparency .

Deontological Ethics (Duty to Respect Privacy) – Data collection should prioritize user rights over profit-driven surveillance .

Relevant Ethical References in Technology: Thus, the correct answer is B. Fourth Amendment , as the company’s actions raise concerns about unlawful data collection and digital privacy violations .

The Gramm-Leach-Bliley Act (GLBA) is a U.S. federal law that governs the privacy and security of consumer financial information. It contains three key rules:

Financial Privacy Rule – Regulates how financial institutions collect and disclose personal financial information.

Safeguards Rule – Requires financial institutions to implement security programs to protect consumer data.

Pretexting Protection Rule – Prohibits deceptive attempts to obtain personal financial information.

In this case, the Financial Privacy Rule is relevant because it provides consumers with a way to control how their financial data is shared . This rule:

Requires financial institutions to provide privacy notices detailing how they collect, use, and share customer information.

Gives customers the right to opt-out of sharing certain types of financial information with third parties.

Since the customer is concerned about their mortgage details being shared, they can use the Financial Privacy Rule to control such disclosures.

B. Pretexting – Involves identity theft or fraudulent attempts to access financial data, which is not relevant here.

C. Consumer Protection – A broad concept that does not specifically address financial data privacy.

D. Safeguards – Focuses on securing customer data from breaches, not on controlling data sharing.

Why Not the Other Options? Thus, the correct answer is A. Financial privacy as it directly addresses the customer’s concern.

Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809 .

Federal Trade Commission (FTC) Guide to the GLBA Financial Privacy Rule.

Solove, D. J. (2020). The Privacy Law Fundamentals . IAPP.

References in Ethics in Technology:

By publishing a professional code of ethics , a nonprofit society establishes ethical expectations , increasing public confidence in the profession. Ethical codes demonstrate a commitment to integrity, fairness, and responsible conduct , fostering public trust in professionals.

ACM & IEEE Codes of Ethics – Promote ethical awareness and public accountability .

Corporate Social Responsibility (CSR) & Ethics in IT – Organizations gain public trust by adopting ethical guidelines .

Virtue Ethics (Character & Reputation) – A professional code reinforces moral credibility and public respect .

Stakeholder Theory (Freeman, 1984) – Ethical practices benefit consumers, employees, and society .

Relevant Ethical References in Technology: Thus, the correct answer is B. Public trust and respect , as publishing a professional code of ethics reassures consumers and strengthens the profession’s credibility .

Workplace monitoring refers to the collection and analysis of employee data to improve workflow efficiency, productivity, and business operations . It involves tracking metrics such as work hours, system usage, and productivity patterns —all while ensuring the data is used strictly for business purposes .

Workplace Privacy Ethics – Ethical monitoring should balance business needs with employee privacy rights .

Surveillance Ethics (Foucault, 1975) – Excessive monitoring could violate employee autonomy , making ethical boundaries crucial .

Corporate Governance & Employee Rights (ISO 27001, GDPR) – Transparency and consent are required when monitoring employee data.

Deontological Ethics (Kantian Ethics) – Treats employees as ends rather than means , ensuring fair workplace practices .

Relevant Ethical References in Technology: Thus, C. Workplace monitoring is the correct answer since the organization collects aggregate employee data to improve workflow .

The Financial Privacy Rule of the Gramm-Leach-Bliley Act (GLBA) allows consumers to control how their personal financial information is shared through an opt-out mechanism .

Why is " Opt-Out " a Threat to Data Privacy?

The opt-out model assumes that consumers consent to having their data shared unless they take action to refuse .

Many consumers may not be aware of their right to opt-out, leading to widespread data sharing without explicit consent .

This is less privacy-protective than an opt-in model , where consumers must actively give permission before their data is shared.

A. Opt-in – This would enhance privacy, not threaten it.

B. Safeguard – Refers to data security, not data-sharing policies.

D. Pretexting – Involves fraudulent access to financial data, which is a different issue.

Why Not the Other Options? Thus, the correct answer is C. Opt-out , as it weakens consumer privacy protections by allowing data sharing unless the consumer takes action.

Gramm-Leach-Bliley Act (1999), 15 U.S.C. §§ 6801-6809 .

Federal Trade Commission (FTC) Guide to GLBA Opt-Out Provisions.

Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life .

References in Ethics in Technology:

Computerized Provider Order Entry (CPOE) is a digital system that allows healthcare providers to enter medication orders electronically , reducing errors related to handwriting and incomplete prescriptions.

Why CPOE?

Eliminates handwriting misinterpretation errors.

Ensures complete medication details , reducing omissions.

Often integrates decision support tools , warning about drug interactions and incorrect dosages.

B. Health Information Exchange (HIE): Shares patient records across providers but does not focus on medication ordering.

C. Electronic Medical Record (EMR): Digitizes patient records but does not prevent prescription errors directly.

D. Clinical Decision Support (CDS): Helps providers make better decisions but does not replace the ordering process like CPOE does.

Why Not the Other Options? Thus, the correct answer is A. Computerized Provider Order Entry (CPOE) , as it directly addresses prescription errors .

Bates, D. W. et al. (1998). Effect of Computerized Physician Order Entry and a Team Intervention on Prevention of Serious Medication Errors.

Institute of Medicine (2000). To Err is Human: Building a Safer Health System.

References in Ethics in Technology:

Employers have the right to reject candidates based on public social media content that suggests illegal activity or violates company policies .

Why is drug use a valid reason for dismissal?

Illegal drug use may violate company policies and raise concerns about reliability, safety, and professionalism.

Many industries, especially cybersecurity and government-related jobs, require security clearances , which prohibit drug use.

U.S. employment laws allow employers to consider illegal drug use when making hiring decisions , provided they do not discriminate based on protected characteristics.

A. Posts indicating pregnancy – Pregnancy is a protected characteristic under Title VII of the Civil Rights Act (Pregnancy Discrimination Act) and cannot be used to reject a candidate.

B. Self-identified gender – Gender identity is protected under anti-discrimination laws (e.g., U.S. EEOC guidelines).

C. Age discrepancy in photos – Employers must avoid age discrimination under the Age Discrimination in Employment Act (ADEA) .

Why Not the Other Options? Thus, the correct answer is D. Photos depicting use of drugs , as it may legally justify disqualification based on company policies and workplace safety requirements.

U.S. Equal Employment Opportunity Commission (EEOC) Guidelines.

U.S. Title VII of the Civil Rights Act (1964).

Age Discrimination in Employment Act (ADEA) (1967).

References in Ethics in Technology:

Contingent workers (temporary employees, contractors, or freelancers) can help fill workforce gaps, but they lack deep familiarity with internal business processes , which can be a disadvantage.

Why Internal Business Process Understanding is a Concern?

Contingent workers are not deeply integrated into company culture, workflows, and long-term strategies.

They require time to adapt to internal systems, which can slow productivity initially.

Unlike full-time employees, they may not retain or transfer institutional knowledge to future projects.

A. Any skills gained during employment will be lost to the company at the project ' s completion. – While true, documentation and knowledge-sharing can mitigate this loss.

C. The company may require the same worker for other projects. – This is a potential benefit , not a disadvantage.

D. The company does not have to provide benefits throughout the project ' s lifecycle. – This is an advantage , not a disadvantage.

Why Not the Other Options? Thus, the correct answer is B. Internal business process understanding will be minimal given the temporary nature of the workers.

Harvard Business Review (2022). Managing Contingent Workers Effectively.

Kalleberg, A. L. (2000). Nonstandard Employment Relations: Part-time, Temporary, and Contract Work.

References in Ethics in Technology:

The missing records in the device database indicate that the store needs to improve the accuracy of its data management processes.

Why Accuracy?

Data accuracy ensures that all records are correctly entered, complete, and reliable.

Manual data entry is prone to errors , including missing or incorrect records.

Implementing automated data entry or validation checks can reduce human error and ensure the integrity of the database.

A. Encryption – Protects data from unauthorized access but does not ensure correct data entry .

B. Collection – Refers to gathering data, but the issue here is with missing or incorrect entries.

C. Availability – Ensures data can be accessed but does not guarantee its accuracy.

Why Not the Other Options? Thus, the correct answer is D. Accuracy , as it directly addresses the issue of missing records.

Redman, T. C. (1998). The Impact of Poor Data Quality on the Typical Enterprise .

Tavani, H. T. (2016). Ethics and Technology: Controversies, Questions, and Strategies for Ethical Computing .

Data Management Body of Knowledge (DMBOK) (2020).

References in Ethics in Technology:

A Denial-of-Service (DoS) attack is a cyberattack in which a hacker floods a target system with an overwhelming amount of requests , causing it to crash, slow down, or become unavailable . In this scenario, the hacker takes over multiple computers and forces them to flood a target site, which is a Distributed Denial-of-Service (DDoS) attack , a more advanced form of DoS.

Cybersecurity Ethics (ACM & IEEE Codes of Ethics) – DoS attacks violate ethical and legal principles , causing harm to organizations and users.

Hacking Ethics (White Hat vs. Black Hat Ethics) – Ethical hackers prevent DoS attacks, whereas malicious hackers exploit vulnerabilities .

Cybercrime Laws (Computer Fraud and Abuse Act, GDPR, CFAA) – DoS attacks are illegal and punishable under international cybersecurity laws .

Utilitarian Perspective on Cybersecurity – Defending against DoS attacks protects public and private digital infrastructure , benefiting society.

Relevant Ethical References in Technology: Thus, the correct answer is C. Denial-of-service (DoS) , as the hacker floods the target site with excessive data queries.

A skewed sample occurs when historical data is biased, unrepresentative, or imbalanced , leading to discriminatory AI outcomes . In this case, the AI system was trained on 20 years of national data , which likely contained historical biases against minorities in drug and alcohol disorder treatments .

Since past law enforcement and healthcare policies have disproportionately impacted minority groups , the AI inherited these biases and began making unfair, discriminatory predictions .

Algorithmic Bias & AI Ethics (ACM/IEEE Guidelines) – AI models must be trained on diverse and representative data .

Fairness in Machine Learning (FAT/ML Framework) – Preventing bias in AI requires identifying and correcting skewed data .

Historical Bias & Systemic Discrimination – Training AI on biased past records leads to unethical and discriminatory outcomes .

Deontological Ethics (Fair AI Decision-Making) – AI developers must ensure unbiased, ethical, and fair AI outputs .

Relevant Ethical References in Technology: Thus, the correct answer is B. Skewed sample , as the AI model was trained on biased historical data, leading to discrimination .

Virtue ethics focuses on the moral character of individuals rather than just the consequences or rules governing their actions. In this scenario, a game designer is concerned about how their participation in the game development process will reflect upon their moral character, which is a hallmark of virtue ethics.

Virtue ethics, as developed by Aristotle , emphasizes traits like honesty, integrity, and compassion. The designer is questioning whether contributing to a game that rewards violent or unlawful acts aligns with virtues such as responsibility and ethical integrity. This aligns with virtue ethics ' central question: What kind of person should I be? rather than What rules should I follow? or What consequences will my actions have?

Virtue Ethics (Aristotle ' s Ethics) – This ethical theory asks whether designing a game that rewards violent behavior aligns with good moral character.

Ethics of Representation in Media and Gaming – Studies have shown that media can influence real-world behaviors, raising ethical concerns about glorifying violence.

Industry Standards (ESRB, PEGI) – While rating systems classify content, ethical concerns go beyond ratings to the moral responsibility of developers in shaping digital culture.

Moral Identity in Design – Developers must consider whether creating certain game mechanics aligns with their personal and professional ethical identity.

Relevant Ethical References in Technology: Thus, the designer ' s concerns reflect virtue ethics by focusing on their personal integrity and professional responsibility in game development.