D333 Ethics in Technology - Set 3 - Part 2

Correct Answer: Control access to and copying of digital content

DRM technologies restrict how digital content can be accessed, copied, or shared, protecting rights holders but sometimes limiting legitimate uses by purchasers.

Correct Answer: Protecting creators' rights versus limiting legitimate consumer use

DRM protects creators from unauthorized copying but can also prevent lawful activities such as backups, accessibility adaptations, or use after a vendor discontinues service.

Correct Answer: The principle that providers should treat all internet traffic equally

Net neutrality holds that internet service providers should not discriminate among content or services by blocking, throttling, or prioritizing traffic for payment.

Correct Answer: It preserves equal access and prevents gatekeeping over information

Supporters argue equal treatment of traffic preserves open access to information and a level playing field for competition, preventing providers from acting as gatekeepers.

Correct Answer: Gaining unauthorized access to systems or data

Malicious hacking is unauthorized access to computer systems or data, distinct from authorized security testing conducted with explicit permission.

Correct Answer: Explicit authorization and intent to improve security

Ethical hacking is conducted with the system owner's explicit authorization and defined scope, with findings reported to improve security rather than exploited for gain.

Correct Answer: An authorized simulated attack to identify security weaknesses

A penetration test is an authorized simulated attack that identifies exploitable vulnerabilities so they can be remediated before real attackers find them.

Correct Answer: Without it, the testing constitutes illegal unauthorized access

Security testing techniques are identical to attacks; only documented authorization defining scope and rules of engagement makes the activity lawful and ethical.

Correct Answer: Manipulating people into revealing information or granting access

Social engineering exploits human psychology rather than technical flaws, using deception such as phishing or pretexting to obtain credentials, information, or access.

Correct Answer: Fraudulent messages designed to trick recipients into revealing credentials

Phishing uses deceptive emails, messages, or websites impersonating trusted parties to trick recipients into disclosing credentials or installing malicious software.

Correct Answer: Malware that encrypts data and demands payment for its release

Ransomware encrypts a victim's data and demands payment for the decryption key, often also threatening to publish stolen data to increase pressure to pay.

Correct Answer: Paying may restore data but funds crime and encourages further attacks

Payment may be the fastest route to restoring operations, but it funds criminal enterprises, encourages more attacks, and offers no guarantee of recovery.

Correct Answer: Undertaking only work they are qualified to perform and maintaining skills

Professional codes require practitioners to work within their competence, seek help or decline work beyond it, and maintain skills as technology evolves.

Correct Answer: Accurately reporting risks, delays, and limitations even when unwelcome

Honest reporting of risks, delays, and defects allows stakeholders to make informed decisions. Concealing problems ultimately produces worse outcomes and breaches professional integrity.

Correct Answer: Raise the concern clearly through appropriate channels

Professionals should articulate concerns clearly to those with authority to act, documenting the issue, before considering escalation. Sabotage is itself unethical.

Correct Answer: Uncontrolled expansion of requirements that can compromise quality and honesty about delivery

Uncontrolled requirement growth can lead to rushed work, hidden compromises in quality or safety, and misleading commitments to stakeholders about what can be delivered.

Correct Answer: Systems should not foreseeably injure users or the public

Non-maleficence requires professionals to avoid foreseeable harm to users and the public, considering physical, financial, psychological, and societal effects of their systems.

Correct Answer: They provide concrete criteria for making content usable by people with disabilities

The Web Content Accessibility Guidelines give testable criteria for perceivable, operable, understandable, and robust content, translating the ethical duty of inclusion into practice.

Correct Answer: Deliberately exploiting psychology to maximize engagement can harm wellbeing

Design that exploits psychological vulnerabilities to maximize time on platform can harm mental health, sleep, and autonomy, particularly for young or vulnerable users.

Correct Answer: Informing users clearly and providing a reasonable transition path

When support ends, users face unpatched vulnerabilities, so vendors should give clear advance notice, explain the risks, and offer a reasonable migration path.