(ISC)2 Certified in Cybersecurity Practice Exam

If an (ISC)² member receives an email offering answers for a certification exam, what should they do?

1. Ignore it

2. Inform (ISC)²

3. Report to law enforcement

4. Notify their employer

The correct answer is: Inform (ISC)²

When a member of (ISC)² receives an email offering answers for a certification exam, the appropriate action is to inform (ISC)². This response is crucial as it helps maintain the integrity of the certification process. (ISC)² has established ethical standards and guidelines that all members are expected to follow, which includes reporting any attempts to undermine the validity of the examinations. By notifying (ISC)², the member plays a vital role in protecting the reputation and value of the certifications. This action allows the organization to investigate the matter further, potentially mitigating the risk of such unethical practices affecting other candidates and the broader cybersecurity community. Taking other actions, such as ignoring the email, could allow unethical behavior to persist, while reporting to law enforcement may be considered excessive unless there's a larger threat or criminal activity involved. Notifying an employer may not directly address the issue at hand and could lead to misunderstandings about the source of the email. Thus, direct communication with (ISC)² is the most effective and responsible approach.