Legal, Ethical Considerations & Policies

CAPE IT · UNIT 2 · MODULE 3 · OBJ. 4
Step 1 of 4
REVISION · PAST-PAPER PRACTICE

Test yourself

Multiple-choice items in Paper 1 style and structured questions in Paper 2 style, adapted from CAPE Information Technology Unit 2 past papers. Your score and answers are saved on this device. When you have finished, submit them to your teacher at the end of this section.

MCQ best –Structured –

Paper 1 practice · 8 multiple-choice items

Choose one answer for each item, then check. Aim for 80% or better.

Adapted from CAPE U2 P1 2019 Item 37; 2020 Item 36; 2022 Item 35
Answer: D. Misuse, false representation and invasion of privacy are ethical issues. Filing a lawsuit is a legal action, not a handling consideration.
Adapted from CAPE U2 P1 2019 Item 32; 2020 Item 44; 2022 Item 44
Answer: A. An IT policy sets clear rules and consequences for how staff create and alter content.
Adapted from CAPE U2 P1 2022 Item 45; 2024 Item 45
Answer: B. It concerns right and wrong (honesty, misrepresentation), so it is primarily ethical.
Adapted from CAPE U2 P1 2024 Item 35
Answer: C. Sharing personal data without consent is an invasion of privacy and breaks data-protection laws.
Adapted from CAPE U2 P1 2019 Item 20
Answer: D. An Internet use policy typically covers monitoring, acceptable communication, and personal online transactions.
Based on CAPE U2 P2 2025 Q5(a)
Answer: D. A BYOD policy sets the security rules for using personal devices for work.
EduTech practice item · Module 3 Obj. 4
Answer: A. Email policies protect the organisation legally and technically by defining acceptable use and handling of messages.
EduTech practice item · Module 3 Obj. 4
Answer: B. Virus-checking attachments is a technical security procedure. The others are ethical values.

Paper 2 practice · structured questions (23 marks)

Write a full answer to each part, then show the mark scheme and tick every point you earned. Marks for a part are capped at its maximum. Mark schemes are EduTech’s own; CXC does not publish them.

Based on CAPE U2 P2 May/June 2021, Question 5(c) and Question 6(d)

Question 1 [11 marks]

Harbour Logistics keeps personal details, salaries and medical records for 400 employees.

(a) Outline TWO policies that should be developed to protect employee information. [4]

MARK SCHEME (a) · max 4

(b) Outline TWO consequences Harbour Logistics may face if it fails to protect employee information. [4]

MARK SCHEME (b) · max 4

(c) List THREE elements likely to be found in an information security policy. [3]

MARK SCHEME (c) · max 3
Based on CAPE U2 P2 May/June 2025, Question 5(a)–(b) and 2023, Question 6(c)

Question 2 [12 marks]

Anika, a developer, works remotely and may use her own laptop and phone on the company network. After a storm, some staff sent client emails from personal email accounts.

(a) Name the policy that allows Anika to use her personal devices, and give ONE advantage and ONE disadvantage of it. [5]

MARK SCHEME (a) · max 5

(b) Outline TWO security measures the IT department should set up on Anika’s devices before allowing network access. [4]

MARK SCHEME (b) · max 4

(c) State THREE policies or practices the company should implement about using personal email accounts for business. [3]

MARK SCHEME (c) · max 3

Submit to your teacher

Send your multiple-choice choices and written answers to your teacher for marking. Your teacher will also see whether you opened the mark scheme or checked your answers before submitting. You can submit again if you improve your answers.

Items are adapted from CAPE® Information Technology Unit 2 Papers 01 and 02 (2019–2026) for practice. © Caribbean Examinations Council for the original papers.