WeBWork Industry Regulations 2 — Questions and Answers
Question 1: Under FERPA, which action requires written consent from a student before a WeBWork administrator may share their grade data?
- Sharing grades with the student's own instructor
- Disclosing scores to a third-party tutoring company (Correct answer)
- Displaying anonymous aggregate class statistics
- Recording scores in the institutional LMS
Correct answer: Disclosing scores to a third-party tutoring company
FERPA requires written student consent before disclosing education records, including grades, to third parties outside the school.
Question 2: Which accessibility standard must federally funded US institutions meet when deploying WeBWork to ensure compliance with Section 508?
- WCAG 1.0 Level A
- WCAG 2.1 Level AA (Correct answer)
- ISO/IEC 40500
- WCAG 3.0 Level AAA
Correct answer: WCAG 2.1 Level AA
The US Access Board's Section 508 refresh aligns with WCAG 2.1 Level AA as the required accessibility conformance level.
Question 3: A WeBWork course is deployed at a K-12 school collecting student login data. Which federal regulation specifically governs the privacy of children under 13?
- FERPA
- HIPAA
- COPPA (Correct answer)
- CCPA
Correct answer: COPPA
COPPA (Children's Online Privacy Protection Act) regulates the collection of personal information from children under 13 by online services.
Question 4: When a WeBWork instance processes personal data of EU students, which regulation requires a lawful basis for processing and the right to erasure?
- FERPA
- GDPR (Correct answer)
- COPPA
- CIPA
Correct answer: GDPR
The GDPR (General Data Protection Regulation) applies to processing personal data of EU residents and includes rights such as erasure.
Question 5: Under the LTI (Learning Tools Interoperability) standard, what is the primary purpose of the LTI launch request?
- Encrypting homework problem sets at rest
- Passing authentication context from an LMS to an external tool like WeBWork (Correct answer)
- Synchronizing grade weights across courses
- Backing up student submission data to cloud storage
Correct answer: Passing authentication context from an LMS to an external tool like WeBWork
An LTI launch request passes user identity and context from the LMS to the external tool, enabling single sign-on access.
Question 6: Which open-source license governs the WeBWork software distribution, affecting how institutions may modify and redistribute it?
- MIT License
- Apache 2.0 License
- GNU General Public License (GPL) (Correct answer)
- Creative Commons BY-NC
Correct answer: GNU General Public License (GPL)
WeBWork is distributed under the GNU GPL, which requires that derivative works also be distributed under the same license.
Question 7: An institution's WeBWork server stores student PII. Under which compliance framework must the institution conduct a risk assessment and implement safeguards if it is a US higher-ed institution receiving federal financial aid?
- SOC 2 Type II
- GLBA Safeguards Rule (Correct answer)
- PCI DSS
- NIST SP 800-53
Correct answer: GLBA Safeguards Rule
The FTC's GLBA Safeguards Rule requires institutions of higher education to protect student financial information with a formal security program.
WeBWork Industry Regulations 2
Under FERPA, which action requires written consent from a student before a WeBWork administrator may share their grade data?