CASE Professional Ethics & Standards 3

Question 1

A CASE professional working as a consultant is offered a lucrative side contract by a competitor of their current client. What is the MOST ethical response?

Accepted Answer

Disclose the offer to the current client and seek guidance

Answer

Disclosing potential conflicts of interest to the current client is required to maintain trust and ethical standing.

Question 2

Which of the following BEST describes 'responsible disclosure' in application security ethics?

Accepted Answer

Notifying the vendor privately and allowing reasonable time to patch before public disclosure

Answer

Responsible disclosure involves notifying the affected vendor first and giving them time to remediate before going public.

Question 3

A security engineer is approached by law enforcement requesting access to an application's user data without a warrant. The MOST appropriate action is to:

Accepted Answer

Require a valid legal order before providing any data

Answer

Legal process such as a court order or warrant must be established before disclosing user data to law enforcement.

Question 4

Continuing professional education (CPE) requirements for security certifications primarily serve to ensure that professionals:

Accepted Answer

Maintain current knowledge in a rapidly evolving field

Answer

CPE requirements exist to keep certified professionals current with evolving threats, technologies, and best practices.

Question 5

A security professional is asked to sign off on a security assessment they did not personally perform. The MOST ethical course of action is to:

Accepted Answer

Refuse to sign off on work they cannot personally verify

Answer

Certifying work you did not perform or cannot verify is a misrepresentation and violates professional ethics.

(CASE) Certified Application Security Engineer Practice Test

(CASE) Certified Application Security Engineer Practice Test

CASE Professional Ethics & Standards 3