Frequently Tested Questions With ELABORATED 100% Correct COMPLETE SOLUTIONS
Guaranteed Pass First Attempt!! Current Update!!
A document that stipulates restrictions and practices that a user
acceptable use policy (AUP) must agree in order to use organizational computing and network
resources.
When an organization decides to accept a risk because the cost of
avoiding the risk outweighs the potential loss of the risk. A decision
to accept a risk can be extremely difficult and controversial when
dealing with safety-critical systems because making that deter-
acceptance
mination involves forming personal judgments about the value of
human life, assessing potential liability in case of an accident,
evaluating the potential impact on the surrounding natural envi-
ronment, and estimating the system's costs and benefits.
A network attack in which an intruder gains access to a network
advanced persistent threat (APT) and stays there—undetected—with the intention of stealing data
over a long period of time (weeks or even months).
A software development methodology in which a system is de-
veloped in iterations lasting from one to four weeks. Unlike the
waterfall system development model, agile development accepts
the fact that system requirements are evolving and cannot be fully
agile development understood or defined at the start of the project.
An agreement of the World Trade Organization that requires mem-
Agreement on Trade-Related Aspects of Intellectual Property ber governments to ensure that intellectual property rights can be
Rights (TRIPS) enforced under their laws and that penalties for infringement are
tough enough to deter further violations.
A wide-ranging act that authorized $787 billion in spending and tax
cuts over a 10-year period and included strong privacy provisions
American Recovery and Reinvestment Act for electronic health records, such as banning the sale of health
information, promoting the use of audit trails and encryption, and
providing rights of access for patients.
The estimated loss from a potential risk event over the course of
a year. The following equation is used to calculate the annual loss
expectancy: ARO × SLE = ALE. Where ARO is the annualized
annualized loss expectancy (ALE) rate of occurrence, an estimate of the probability that this event
will occur over the course of a year and SLE is the single loss
expectancy, the estimated loss that would be incurred if the event
happens.
An estimate of the probability that a risk event will occur over the
annualized rate of occurrence (ARO)
course of a year.
The expression of opinions by people who do not reveal their
anonymous expression
identity.
A service that allows anonymity on the Internet by using a com-
puter program that strips the originating header and/or IP address
anonymous remailer service
from the message and then forwards the message to its intended
recipient.
Laws designed to reduce frivolous SLAPPs (strategic lawsuit
against public participation (SLAPP), which is a lawsuit filed by
anti-SLAPP laws
corporations, government officials, and others against citizens and
community groups who oppose them on matters of concern).
Software that scans for a specific sequence of bytes, known as a
antivirus software
virus signature, that indicates the presence of a specific virus.
The people, procedures, hardware, software, data, and knowl-
edge needed to develop computer systems and machines that
artificial intelligence systems can simulate human intelligence processes, including learning
(the acquisition of information and rules for using the information),
reasoning (using rules to reach conclusions), and self-correction
Downloaded by Ned Toyn ()
, WGU D333 ETHICS IN TECHNOLOGY [WGU Comprehensive Resource To Help You Ace 2026-2027 Includes
Frequently Tested Questions With ELABORATED 100% Correct COMPLETE SOLUTIONS
Guaranteed Pass First Attempt!! Current Update!!
(using the outcome from one scenario to improve its performance
on future scenarios).
A group that provides assistance to the board of directors in
fulfilling its responsibilities with respect to the oversight of the
quality and integrity of the organization's accounting and reporting
practices and controls, including financial statements and reports;
audit committee
the organization's compliance with legal and regulatory require-
ments; the qualifications, independence, and performance of the
company's independent auditor; and the performance of the com-
pany's internal audit team.
The elimination of a vulnerability that gives rise to a particular
risk in order to avoid the risk altogether. This is the most effective
avoidance
solution but often not possible due to organizational requirements
and factors beyond an organization's control.
The moral corruption of people in power, which is often facilitated
Bathsheba syndrome by a tendency for people to look the other way when their leaders
act inappropriately.
A method or technique that has consistently shown results su-
best practice perior to those achieved with other means and that is used as a
benchmark within a particular industry.
The first 10 amendments to the United States Constitution that
Bill of Rights
spell out additional rights of individuals.
A type of dynamic testing that involves viewing the software unit as
black-box testing a device that has expected input and output behaviors but whose
internal workings are unknown (a black box).
A sophisticated threat that combines the features of a virus, worm,
blended threat
Trojan horse, and other malicious code into a single payload.
An agreed-upon sets of skills and abilities that all licensed profes-
body of knowledge
sionals must possess.
A large group of computers, which are controlled from one or more
botnet remote locations by hackers, without the knowledge or consent of
their owners.
breach of contract The failure of one party to meet the terms of a contract.
breach of the duty of care The failure to act as a reasonable person would act.
breach of warranty When a product fails to meet the terms of its warranty.
The act of providing money, property, or favors to someone in
bribery
business or government in order to obtain a business advantage.
A business policy that permits, and in some cases, encourages
employees to use their own mobile devices (smartphones, tablets,
bring your own device (BYOD) or laptops) to access company computing resources and applica-
tions, including email, corporate databases, the corporate intranet,
and the Internet.
A trade group that represent the world's largest software and
BSA | The Software Alliance
hardware manufacturers.
A risk-based strategy that includes an occupant emergency evac-
uation plan, a continuity of operations plan, and an incident man-
business continuity plan agement plan with an active governance process to minimize the
potential impact of any security incident and to ensure business
continuity in the event of a cyberattack or some form of disaster.
A set of interrelated components—including hardware, software,
business information system databases, networks, people, and procedures—that collects and
processes data and disseminates the output.
Collection of best practices that help organizations improve their
Capability Maturity Model Integration (CMMI) models
processes.
Downloaded by Ned Toyn ()
, WGU D333 ETHICS IN TECHNOLOGY [WGU Comprehensive Resource To Help You Ace 2026-2027 Includes
Frequently Tested Questions With ELABORATED 100% Correct COMPLETE SOLUTIONS
Guaranteed Pass First Attempt!! Current Update!!
CAPTCHA (Completely Automated Public Turing Test to Tell Com- Software that generates and grades tests that humans can pass
puters and Humans Apart) and all but the most sophisticated computer programs cannot.
Indicates that a professional possesses a particular set of skills,
knowledge, or abilities, in the opinion of the certifying organization.
Certification can also apply to products (e.g., the Wi-Fi CERTI-
certification
FIED logo assures that the product has met rigorous interoper-
ability testing to ensure that it will work with other Wi-Fi-certified
products) and is generally voluntary.
An act signed into law in 1998 with the aim of prohibiting the
Child Online Protection Act (COPA) making of harmful material available to minors via the Internet; the
law was ultimately ruled largely unconstitutional.
An act passed in 2000; it required federally financed schools and
libraries to use some form of technological protection (such as
Children's Internet Protection Act (CIPA)
an Internet filter) to block computer access to obscene material,
pornography, and anything else considered harmful to minors.
An act implemented in 1998 in an attempt to give parents control
Children's Online Privacy Protection Act (COPPA) over the collection, use, and disclosure of their children's personal
information.
CIA security triad Refers to confidentiality, integrity, and availability.
A process and a set of tools designed to enhance healthcare-re-
clinical decision support (CDS) lated decision making through the use of clinical knowledge and
patientspecific information to improve healthcare delivery.
A specific application of CMMI frequently used to assess and
CMMI-Development (CMMI-DEV)
improve software development practices.
A statement that highlights an organization's key ethical issues
code of ethics and identifies the overarching values and principles that are im-
portant to the organization and its decision making.
A employment situation in which two employers have actual or
coemployment relationship potential legal rights and duties with respect to the same employee
or group of employees.
An act passed in 1994 that amended the Wiretap Act and Elec-
tronic Communications Privacy Act, which required the telecom-
Communications Assistance for Law Enforcement Act (CALEA) munications industry to build tools into its products that federal
investigators could use—after obtaining a court order—to eaves-
drop on conversations and intercept electronic communications.
Title V of the Telecommunications Act, it aimed at protecting chil-
dren from pornography, including imposing $250,000 fines and
Communications Decency Act (CDA)
prison terms of up to two years for the transmission of "indecent"
material over the Internet.
To be in accordance with established policies, guidelines, specifi-
compliance
cations, or legislation.
A discipline that combines elements of law and computer science
to identify, collect, examine, and preserve data from computer
computer forensics systems, networks, and storage devices in a manner that pre-
serves the integrity of the data gathered so that it is admissible
as evidence in a court of law.
A system that enables physicians to place orders (for drugs,
computerized provider order entry (CPOE) system laboratory tests, radiology, physical therapy) electronically, with
the orders transmitted directly to the recipient.
A conflict between a person's (or firm's) self-interest and the
conflict of interest
interests of a client.
A job situation in which an individual does not have an explicit or
contingent work
implicit contract for long-term employment.
contributory negligence When the plaintiffs' own actions contributed to their injuries.
Downloaded by Ned Toyn ()