ETHC303 · Major 1 — Term 253 (Sec 82)

What is “Phishing”?

aA type of firewall. bA method to acquire information by masquerading as a trusted entity. cA coding error in software. dA & C.

✓Correct Answer: b)

Phishing is a social-engineering attack: the attacker masquerades as a trusted entity (a bank, an employer, a service) to get the victim to hand over credentials or card details.

Why is the “Paternalistic model” of professional relationships potentially problematic?

aIt requires too much work from the client. bIt does not utilize the professional's specialized knowledge. cIt removes the client's ability to participate in decision-making. dIt is against the law.

✓Correct Answer: c)

In the paternalistic model the professional makes the decisions, so the client loses their share of the decision-making — their autonomy, not the professional's expertise, is what gets lost.

Which of these is a key issue in the “Employer-Employee” relationship?

aThe employee must do whatever the employer asks, even if illegal. bThe employer must pay for the employee's personal life. cNeither party should take advantage of the other. dHonesty means the employee can never quit.

✓Correct Answer: c)

The relationship rests on mutual obligation — neither side should exploit the other. Loyalty never extends to illegal orders (a), and it does not remove the right to resign (d).

Why is it important to update OS security updates?

aTo speed up the processor. bTo address and treat potential vulnerabilities. cTo save hard drive space. dAll of the above.

✓Correct Answer: b)

Security updates exist to patch known vulnerabilities before they are exploited. Performance and disk space are not the purpose of a security patch, so “all of the above” is wrong.

Why is it said that “most errors found in software can be traced to requirements shortages”?

aBecause programmers are lazy. bBecause the hardware is usually broken. cBecause the clients change their minds too often. dBecause of incompleteness in the requirements specification phase.

✓Correct Answer: d)

Defects trace back to an incomplete requirements specification — what was never specified cannot be designed, built or tested correctly, and the cost of fixing it grows with every later phase.

Why is it that “Virtue ethics recognizes the important role that emotions play in living a moral life” while others might not?

aBecause it allows people to lie. bIt focuses on character traits, not just abstract calculations or rules. cIt makes it easier to pass laws. dIt assumes all emotions are good.

✓Correct Answer: b)

Virtue ethics evaluates character rather than running a rule check (Kant) or a consequence calculation (utilitarianism), and a trained emotional response is part of good character. It does not claim every emotion is good (d).

What is the role of a system administrator in the context of security culture?

aThey have the authority to monitor all activities and must strictly adhere to a code of ethics. bThey should never monitor users to protect privacy. cTheir role is irrelevant to network security. dA & B.

✓Correct Answer: a)

The administrator holds broad monitoring authority, and precisely because of that power they are bound by a code of ethics. Options (a) and (b) contradict each other, so (d) cannot hold.

What does the “Agency model” of professional relationships imply?

aThe professional is an independent expert. bThe professional acts only as the client's agent, doing exactly what they are told. cThe professional must refuse if they disagree. dAll of the above.

✓Correct Answer: b)

The agency model is the mirror image of the paternalistic one: the client decides and the professional executes the client's instructions, which is why it is criticized for underusing the professional's judgment.

Q10

What is a major criticism of Divine Command Theory in professional ethics?

aIt is not based on reason or shared standards among a diverse workforce. bIt is too new. cA & B. dNone.

✓Correct Answer: a)

Divine Command Theory grounds morality in revelation rather than shared reasoning, so it gives a religiously diverse workplace no common standard to argue from. It is certainly not a new theory (b).

Q2 · Part A 3 points

List 3 of the recommendations for a security culture, with an appropriate example of each.

One recommendation plus one concrete example each.

Q2 · Part B 2 points

List four of the functions of ethics codes that help enforce them in an organization.

A list is fine — one function per line.

Q3 · Part A 1 point

Scenario — The Unpaid Internship: a startup asks you to work as an unpaid intern for six months, promising the experience will make you highly employable, even though you will do the same work as paid employees.

According to Virtue Ethics, what is the primary focus when evaluating this company's offer?

One or two sentences.

Q3 · Part B 2 points

Using Virtue Ethics, how would you determine whether the company is acting “virtuously”?

Name the standard, then apply it to the company.

Q3 · Part C 2 points

Compare how Virtue Ethics and Kantianism would evaluate this internship differently.

Give each theory's test, then contrast them.

Professional Relationships, Network Security &Virtue Ethics

Professional Relationships, Network Security &
Virtue Ethics