CAD Professional Ethics & Standards 2

Question 1

A developer discovers that a deployed application is processing user data in a way not disclosed in the privacy policy. What is the FIRST action they should take?

Accepted Answer

Report the issue to the appropriate stakeholder or compliance officer

Answer

Delete the collected data immediately

Answer

Patch the application silently to avoid alarming users

Answer

Wait until the next scheduled audit

Question 2

Which principle is BEST described by ensuring that application access is granted only to the minimum level needed to perform a job function?

Accepted Answer

Principle of least privilege

Answer

Separation of duties

Answer

Defense in depth

Answer

Non-repudiation

Question 3

An application developer is asked by a manager to bypass code review for an urgent production fix. The ethical response is to:

Accepted Answer

Perform a self-review and document the exception with justification

Answer

Comply because the manager has authority

Answer

Refuse to deploy until a full review is completed next sprint

Answer

Deploy and not document the bypass

Question 4

Under the ACM Code of Ethics, a software professional's FIRST obligation is to:

Accepted Answer

The public good

Answer

Their employer's business interests

Answer

The advancement of the software profession

Answer

Their client's confidentiality

Question 5

A CAD professional knowingly uses a third-party library with an unresolved critical security CVE to meet a deadline. This behavior PRIMARILY violates which ethical standard?

Accepted Answer

Competence and due care

Answer

Confidentiality

Answer

Impartiality

Answer

Intellectual property rights

Question 6

When a developer identifies a conflict of interest in a project assignment, the ethical course of action is to:

Accepted Answer

Disclose the conflict to the appropriate authority and recuse if necessary

Answer

Complete the project while keeping the conflict private

Answer

Transfer the conflict to a junior developer

Answer

Ignore it if it does not affect technical decisions

Question 7

A developer is pressured to falsify test results to meet a release milestone. According to professional ethics standards, they should:

Accepted Answer

Refuse and document the pressure applied

Answer

Comply to maintain team harmony

Answer

Falsify only the non-critical test cases

Answer

Ask a colleague to submit the falsified results instead