WGU Ethics In Technology (D333) Exam Questions

Answer : A

Under the Foreign Intelligence Surveillance Act (FISA), the FBI can monitor communications without a warrant if both parties are non-U.S. citizens and the surveillance is conducted for intelligence purposes.

However, if one or both parties are U.S. citizens, the FBI would typically require a warrant under FISA or a separate court authorization, even in a short-term investigation.

Relevant Ethical Reference in Technology:

FISA (1978) & Patriot Act (2001) -- Provide legal authority for surveillance but impose restrictions on monitoring U.S. citizens.

Fourth Amendment (Privacy Rights) -- Prevents warrantless wiretapping of U.S. citizens except in national security cases.

Snowden Leaks (2013) & Mass Surveillance Ethics -- Raised concerns over the overreach of intelligence agencies in digital surveillance.

Deontological Ethics (Right to Privacy vs. National Security) -- Governments must balance security concerns with individual privacy rights.

Thus, the correct answer is A. Calls between two non-U.S. citizens, as FISA allows warrantless surveillance in such cases.

Answer : D

Consumer profiling is the practice of collecting and analyzing consumer data---including demographic, geographic, and behavioral attributes---to optimize sales strategies, enhance marketing efforts, and personalize customer experiences.

In this scenario, the organization gathers various types of customer data to improve its sales processes, which is a clear example of consumer profiling rather than surveillance or workplace monitoring.

Relevant Ethical Reference in Technology:

Privacy and Data Ethics (GDPR, CCPA) -- Consumer profiling raises ethical concerns about informed consent, transparency, and data protection.

Big Data Ethics (Tene & Polonetsky, 2012) -- Ethical consumer profiling must ensure fair use, avoidance of bias, and non-discriminatory practices.

Utilitarian vs. Deontological Perspectives -- While profiling improves customer experiences, it must not violate privacy rights or enable unethical targeting.

ACM Code of Ethics -- Encourages responsible collection, use, and protection of consumer data.

Thus, since the company is gathering consumer data to optimize sales, the correct answer is D. Consumer profiling.

Answer : C

The unintended source of bias in AI algorithms comes from human developers, who bring their own unconscious biases into data selection, feature engineering, and model training.

Even when AI is designed to be neutral, developers may:

Select biased training data

Define biased decision-making rules

Fail to recognize discriminatory outcomes

Relevant Ethical Reference in Technology:

Algorithmic Bias & Human Influence -- AI reflects the biases of those who design it, making human oversight crucial.

ACM & IEEE AI Ethics Guidelines -- Encourage bias audits and ethical AI development.

Historical Bias & Discrimination in AI (Amazon Hiring AI Case) -- AI replicated gender biases because of biased developer input.

Deontological Ethics & AI Responsibility -- Developers must take responsibility for preventing bias in AI systems.

Thus, the correct answer is C. Human developers, as they introduce unintentional bias into AI systems through their decisions.

Answer : C

A Denial-of-Service (DoS) attack is a cyberattack in which a hacker floods a target system with an overwhelming amount of requests, causing it to crash, slow down, or become unavailable. In this scenario, the hacker takes over multiple computers and forces them to flood a target site, which is a Distributed Denial-of-Service (DDoS) attack, a more advanced form of DoS.

Relevant Ethical Reference in Technology:

Cybersecurity Ethics (ACM & IEEE Codes of Ethics) -- DoS attacks violate ethical and legal principles, causing harm to organizations and users.

Hacking Ethics (White Hat vs. Black Hat Ethics) -- Ethical hackers prevent DoS attacks, whereas malicious hackers exploit vulnerabilities.

Cybercrime Laws (Computer Fraud and Abuse Act, GDPR, CFAA) -- DoS attacks are illegal and punishable under international cybersecurity laws.

Utilitarian Perspective on Cybersecurity -- Defending against DoS attacks protects public and private digital infrastructure, benefiting society.

Thus, the correct answer is C. Denial-of-service (DoS), as the hacker floods the target site with excessive data queries.

Answer : B

The consultant was hired by the organization to test its cybersecurity and identify vulnerabilities. This is the role of a white hat hacker, also known as an ethical hacker.

Why White Hat Hacker?

White hat hackers conduct security assessments legally and ethically to help organizations strengthen their cyber defenses.

The consultant demonstrated SQL injection attacks in a controlled manner to expose weaknesses without malicious intent.

Ethical hacking is a recognized practice under cybersecurity frameworks like NIST and ISO 27001.

Why Not the Other Options?

A . Cybercriminal -- Engages in illegal hacking for personal or financial gain, whereas the consultant was hired to help the organization.

C . Cyberterrorist -- Motivated by political or ideological goals, not cybersecurity testing.

D . Black Hat Hacker -- Malicious hackers who exploit vulnerabilities for personal benefit, unlike ethical hackers.

Thus, the correct answer is B. White Hat Hacker, as the consultant was conducting authorized penetration testing.

Reference in Ethics in Technology:

CEH (Certified Ethical Hacker) Guidelines.

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

OWASP Top Ten Security Risks (2023).

Answer : D

Confidentiality ensures that only authorized personnel have access to sensitive information.

Why Confidentiality Was Violated?

Payroll information is sensitive and should be accessible only to authorized employees.

The erroneous access granted to new hires means private financial information is at risk.

Confidentiality is a fundamental principle in cybersecurity, ensuring that data is accessed only by those who need it.

Why Not the Other Options?

A . Availability -- Ensures systems remain operational, but this case concerns unauthorized access, not system downtime.

B . Accessibility -- Relates to making data usable for authorized individuals, but this case involves an unauthorized access issue.

C . Integrity -- Ensures data remains accurate and unaltered, but the issue here is privacy, not data accuracy.

Thus, the correct answer is D. Confidentiality, as it ensures that only authorized users can access sensitive information.

Reference in Ethics in Technology:

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

ISO/IEC 27001: Information Security Management Systems.

Answer : C

The Foreign Corrupt Practices Act (FCPA) prohibits U.S. companies from bribing foreign officials and requires accurate financial records.

Why FCPA Applies?

The company disguised payments to international officials, which violates the FCPA's anti-bribery provisions.

The lack of internal controls to maintain proper records also violates FCPA accounting rules.

The law applies to publicly traded companies, such as those listed on the New York Stock Exchange.

Why Not the Other Options?

A . Committee on Foreign Investment in the United States -- Regulates foreign investment, not bribery.

B . Foreign Intelligence Surveillance Act -- Covers electronic surveillance and national security, not corporate misconduct.

D . Electronic Communications Privacy Act -- Protects electronic communications from unauthorized access, unrelated to accounting fraud.

Thus, the correct answer is C. Foreign Corrupt Practices Act (FCPA) as it governs anti-bribery and financial reporting.

Reference in Ethics in Technology:

Foreign Corrupt Practices Act (FCPA), 15 U.S.C. 78dd-1, et seq.