1|Page
WGU D333 Ethics in Technology OA Exam
2026/2027 Exam Questions with Verified
Answers and Detailed Rationales
Question 1
What is an acceptable use policy (AUP)?
A. A document that outlines employee salary guidelines
B. A document that stipulates restrictions and practices that a user must agree to in
order to use organizational computing and network resources
C. A policy that determines hardware purchasing standards
D. A document that describes disaster recovery procedures
Correct Answer: B. A document that stipulates restrictions and practices
that a user must agree to in order to use organizational computing and
network resources
Rationale: An Acceptable Use Policy (AUP) is a document that stipulates
restrictions and practices that users must agree to in order to use organizational
computing and network resources.
,2|Page
Question 2
When an organization decides to accept a risk because the cost of avoiding the
risk outweighs the potential loss, this is known as:
A. Mitigation
B. Transference
C. Acceptance
D. Avoidance
Correct Answer: C. Acceptance
Rationale: Acceptance is when an organization decides to accept a risk because the
cost of avoiding the risk outweighs the potential loss. This decision can be difficult,
especially with safety-critical systems.
Question 3
Which type of network attack involves an intruder gaining access to a network
and staying there undetected for a long period to steal data?
A. Distributed denial-of-service (DDoS) attack
B. Advanced persistent threat (APT)
C. Zero-day exploit
D. Phishing attack
,3|Page
Correct Answer: B. Advanced persistent threat (APT)
Rationale: An advanced persistent threat (APT) is a network attack in which an
intruder gains access to a network and stays there undetected for weeks or even
months with the intention of stealing data.
Question 4
Which software development methodology accepts that system requirements
are evolving and cannot be fully understood at the start of the project, with
development occurring in iterations lasting one to four weeks?
A. Waterfall development
B. Agile development
C. N-version programming
D. Predictive coding
Correct Answer: B. Agile development
Rationale: Agile development accepts that system requirements are evolving and
cannot be fully understood or defined at the start. Systems are developed in
iterations lasting from one to four weeks.
Question 5
, 4|Page
What is the annualized loss expectancy (ALE) formula?
A. ALE = AV × EF
B. ALE = ARO × SLE
C. ALE = SLE ÷ ARO
D. ALE = AV × SLE
Correct Answer: B. ALE = ARO × SLE
Rationale: The annualized loss expectancy (ALE) is calculated as ARO × SLE, where
ARO is the annualized rate of occurrence and SLE is the single loss expectancy.
Question 6
Which type of testing views the software unit as a device with expected input
and output behaviors but whose internal workings are unknown?
A. White-box testing
B. Static testing
C. Black-box testing
D. Unit testing
Correct Answer: C. Black-box testing
Rationale: Black-box testing involves viewing the software unit as a device with
WGU D333 Ethics in Technology OA Exam
2026/2027 Exam Questions with Verified
Answers and Detailed Rationales
Question 1
What is an acceptable use policy (AUP)?
A. A document that outlines employee salary guidelines
B. A document that stipulates restrictions and practices that a user must agree to in
order to use organizational computing and network resources
C. A policy that determines hardware purchasing standards
D. A document that describes disaster recovery procedures
Correct Answer: B. A document that stipulates restrictions and practices
that a user must agree to in order to use organizational computing and
network resources
Rationale: An Acceptable Use Policy (AUP) is a document that stipulates
restrictions and practices that users must agree to in order to use organizational
computing and network resources.
,2|Page
Question 2
When an organization decides to accept a risk because the cost of avoiding the
risk outweighs the potential loss, this is known as:
A. Mitigation
B. Transference
C. Acceptance
D. Avoidance
Correct Answer: C. Acceptance
Rationale: Acceptance is when an organization decides to accept a risk because the
cost of avoiding the risk outweighs the potential loss. This decision can be difficult,
especially with safety-critical systems.
Question 3
Which type of network attack involves an intruder gaining access to a network
and staying there undetected for a long period to steal data?
A. Distributed denial-of-service (DDoS) attack
B. Advanced persistent threat (APT)
C. Zero-day exploit
D. Phishing attack
,3|Page
Correct Answer: B. Advanced persistent threat (APT)
Rationale: An advanced persistent threat (APT) is a network attack in which an
intruder gains access to a network and stays there undetected for weeks or even
months with the intention of stealing data.
Question 4
Which software development methodology accepts that system requirements
are evolving and cannot be fully understood at the start of the project, with
development occurring in iterations lasting one to four weeks?
A. Waterfall development
B. Agile development
C. N-version programming
D. Predictive coding
Correct Answer: B. Agile development
Rationale: Agile development accepts that system requirements are evolving and
cannot be fully understood or defined at the start. Systems are developed in
iterations lasting from one to four weeks.
Question 5
, 4|Page
What is the annualized loss expectancy (ALE) formula?
A. ALE = AV × EF
B. ALE = ARO × SLE
C. ALE = SLE ÷ ARO
D. ALE = AV × SLE
Correct Answer: B. ALE = ARO × SLE
Rationale: The annualized loss expectancy (ALE) is calculated as ARO × SLE, where
ARO is the annualized rate of occurrence and SLE is the single loss expectancy.
Question 6
Which type of testing views the software unit as a device with expected input
and output behaviors but whose internal workings are unknown?
A. White-box testing
B. Static testing
C. Black-box testing
D. Unit testing
Correct Answer: C. Black-box testing
Rationale: Black-box testing involves viewing the software unit as a device with
