Practice Questions C2-015–C2-028
C2-015 — Privacy Principles · Standard · Distinguish
A company wants secondary uses beyond the purpose for which consumer data was provided. Which FTC criterion most directly says consumers should have options about whether/how that use occurs? - A. Enforcement / Redress - B. Integrity / Security - C. Choice / Consent - D. Access / Participation
C2-016 — Online Data · Standard · Understand
Which online-ethics topic is most closely connected to erasing information about an individual from the web and to retention practice? - A. Data ownership - B. Identity - C. Freedom of speech online - D. Right to be Forgotten
C2-017 — Unethical Practices · Standard · Apply
A chart uses correct values but truncates its axis so a 0.3-point improvement looks enormous. Most direct risk pattern? - A. Misleading visualization - B. Timing - C. Biased sampling - D. Transformation/integration
C2-018 — Unethical Practices · Standard · Apply
Two accurate statistics are presented as comparable, but one counts individuals and the other everyone living in households where at least one person qualifies. Primary ethical defect? - A. Storage limitation - B. Unclear definitions / invalid comparison - C. Data masking - D. Data ownership
C2-019 — Unethical Practices · Difficult · Apply
An analyst repeatedly changes filters/exclusions until a subset supports a prior belief while contrary results are ignored. Most specific bias pattern? - A. Context and culture - B. Biased sampling methodology - C. Hunch and search - D. Data collection for a pre-defined result
C2-020 — Unethical Practices · Standard · Distinguish
A customer study is sound after collection, but its sample excludes an entire region containing much of the target population. Most direct bias mechanism? - A. Biased use of data collected - B. Context and culture - C. Hunch and search - D. Biased sampling methodology
C2-021 — Unethical Practices · Difficult · Best action
A merged eligibility dataset loads successfully, but origin, transformations and consistency of several fields cannot be explained. What should happen before consequential use? - A. Establish provenance/lineage, reliable Metadata, DQ evidence, ownership/protection requirements and auditable change history. - B. Proceed because loading proves trustworthiness. - C. Delete source systems so the merge becomes authoritative. - D. Mask direct identifiers; this resolves integration risk.
C2-022 — Unethical Practices · Difficult · Distinguish
Why should remediation use formal, auditable change control? - A. Every remediation needs data-subject approval. - B. Even well-intended changes can alter data improperly/illegally, so traceable change history is needed. - C. Remediation applies only to non-personal data. - D. A change log guarantees corrected data is accurate.
C2-023 — Unethical Practices · Difficult · Apply
Names/emails are removed from mobility data, but location traces + public data re-identify people. Best interpretation? - A. Only a Data Quality breach. - B. Ethically safe because direct identifiers are gone. - C. Obfuscation reduced exposure but did not eliminate re-identification risk; Governance/context-aware protection remain necessary. - D. All analytic use must permanently stop whenever re-identification is theoretically possible.
C2-024 — Ethical Culture · Standard · Sequence
An organization wants to improve its handling culture. What is the first step in §3.5.1? - A. Buy automated ethics monitoring. - B. Require annual affirmations first. - C. Publish a new code immediately. - D. Review current-state handling practices and their connection to ethical/compliance drivers.
C2-025 — Ethical Culture · Standard · Distinguish
“Each year, review access to patient-data systems and remove users who no longer need access.” In Principle→Risk→Practice→Control, what is this? - A. Control - B. Guiding principle - C. Risk - D. Practice
C2-026 — Ethical Culture · Standard · Understand
What is the ethical-data-handling roadmap's role? - A. Replace policy once implementation begins. - B. Sequence approved training/communications, gap remediation, mitigation, monitoring and role/process implementation over time. - C. List current privacy laws only. - D. Provide a one-time security architecture diagram.
C2-027 — Ethical Risk Model · Difficult · Apply
Which sequence matches the four areas Chapter 2 asks a personal-data analytics project to examine? - A. Storage platform → encryption → backup → archive - B. Budget → vendor → date → support model - C. Population selection → behavior/data capture → BI/analytics/Data Science activity → results/access/use - D. Collection → normalization → indexing → query optimization
C2-028 — Governance · Expert-discrimination · Best action
A consequential personal-data scoring system has no explicit legal prohibition, so data scientists say ethics is no longer their concern. Best response? - A. Legal makes the final ethical decision because law is complete. - B. Proceed if statistically accurate. - C. Only Governance has ethical responsibility. - D. Governance should set/oversee standards and review with Legal, while practitioners still identify, explain and escalate ethical risks.