CBT Legal and Ethical Standards 3 — Questions and Answers
Question 1: A candidate passes a high-stakes professional licensure exam but later evidence shows the exam was administered with broken security protocols. The licensing board's most legally sound response is to:
- Honor all scores since candidates acted in good faith
- Notify affected candidates and conduct a formal validity review (Correct answer)
- Immediately revoke all licenses issued based on that exam
- Do nothing unless a candidate files a formal complaint
Correct answer: Notify affected candidates and conduct a formal validity review
Regulatory due diligence requires notifying affected parties and conducting a validity study before any adverse action, balancing public protection with candidate rights.
Question 2: Under the Computer Fraud and Abuse Act (CFAA), which of the following actions during a CBT session could expose a candidate to federal criminal liability?
- Using an ergonomic keyboard provided by the testing center
- Accessing unauthorized areas of the testing software or network (Correct answer)
- Requesting a restroom break during the exam
- Using approved scratch paper provided by the proctor
Correct answer: Accessing unauthorized areas of the testing software or network
The CFAA criminalizes unauthorized access to computer systems; attempting to access exam content, answer keys, or network resources beyond what is permitted constitutes a federal offense.
Question 3: A test developer working under a non-disclosure agreement (NDA) leaks live exam questions to a test prep company. Which of the following is the MOST accurate legal consequence?
- Only the test prep company is liable
- The developer may face civil liability for breach of contract and potentially criminal charges (Correct answer)
- The developer is liable only if they received payment
- NDAs are unenforceable in the testing industry
Correct answer: The developer may face civil liability for breach of contract and potentially criminal charges
Violating an NDA exposes the individual to civil breach of contract claims and, depending on the nature of the content, potentially criminal charges for theft of trade secrets or fraud.
Question 4: Which NCCA (National Commission for Certifying Agencies) accreditation standard specifically addresses the requirement for a documented, systematic process to detect and respond to exam fraud?
- The validity standard
- The exam security standard (Correct answer)
- The item development standard
- The score reporting standard
Correct answer: The exam security standard
NCCA's exam security standard requires accredited programs to have documented policies and procedures for identifying, investigating, and responding to fraudulent examination activity.
Question 5: A proctoring company's remote monitoring software records video of a candidate's home environment during testing. Which privacy principle is most relevant to how long this footage may be retained?
- Purpose limitation (Correct answer)
- Data accuracy
- Transparency
- Accountability
Correct answer: Purpose limitation
Purpose limitation holds that personal data collected for a specific purpose (e.g., proctoring) must not be retained or used beyond that original, stated purpose.
Question 6: An ADA accommodation request for extended time on a computer-based professional exam is denied without review. The candidate's strongest legal argument would be based on:
- Disparate treatment under the ADA (Correct answer)
- A violation of HIPAA privacy rules
- Breach of the testing center's service contract
- A FERPA records violation
Correct answer: Disparate treatment under the ADA
Refusing to review an accommodation request for a disability denies the candidate an individualized assessment, which violates the ADA's requirement for equal access to testing.
Question 7: A certification body wants to use artificial intelligence to flag suspicious answer patterns as potential cheating. Ethically, this approach requires:
- No additional safeguards since AI is objective
- Human review of flagged cases before any adverse action is taken (Correct answer)
- Immediate score invalidation of all flagged candidates
- Disclosure to competitors' certification programs
Correct answer: Human review of flagged cases before any adverse action is taken
Ethical use of AI in high-stakes decisions requires a human-in-the-loop review to catch algorithmic errors and ensure due process before candidates are penalized.
CBT Legal and Ethical Standards 3
A candidate passes a high-stakes professional licensure exam but later evidence shows the exam was administered with broken security protocols.
The licensing board's most legally sound response is to: