CAD Professional Ethics & Standards 2

Question 1

A developer discovers that a deployed application is processing user data in a way not disclosed in the privacy policy. What is the FIRST action they should take?

Accepted Answer

Report the issue to the appropriate stakeholder or compliance officer

Answer

Ethical practice requires immediately escalating undisclosed data processing to the compliance officer or relevant stakeholder to initiate proper remediation.

Question 2

Which principle is BEST described by ensuring that application access is granted only to the minimum level needed to perform a job function?

Accepted Answer

Principle of least privilege

Answer

The principle of least privilege limits user and system access rights to only what is necessary for legitimate business purposes.

Question 3

An application developer is asked by a manager to bypass code review for an urgent production fix. The ethical response is to:

Accepted Answer

Perform a self-review and document the exception with justification

Answer

When process exceptions are unavoidable, ethical practice requires documenting the deviation and its business justification to maintain accountability.

Question 4

Under the ACM Code of Ethics, a software professional's FIRST obligation is to:

Accepted Answer

The public good

Answer

The ACM Code of Ethics places the public good and societal benefit as the highest priority obligation for computing professionals.

Question 5

A CAD professional knowingly uses a third-party library with an unresolved critical security CVE to meet a deadline. This behavior PRIMARILY violates which ethical standard?

Accepted Answer

Competence and due care

Answer

Using components with known critical vulnerabilities without remediation violates the duty of competence and due care owed to users and stakeholders.

(CAD) Certified Application Developer Practice Test

(CAD) Certified Application Developer Practice Test

CAD Professional Ethics & Standards 2