Principle: A software company is justified in releasing an application with known security vulnerabilities only if delaying the release would cause the company to lose its primary source of funding, and the vulnerabilities do not compromise sensitive user financial data.
Which of the following judgments most closely conform to the principle stated above? Select all that apply.
- ANovaTech's known software vulnerabilities do not compromise user financial data, and delaying the release would cause the company to lose its primary source of funding. Therefore, NovaTech is justified in releasing the application with the known vulnerabilities.
- Apex Systems released its software with known security vulnerabilities. However, delaying the release would not have jeopardized the company's primary source of funding. Therefore, Apex Systems was not justified in releasing the application.Answer
- COmniCorp was not justified in releasing its new database software with known security vulnerabilities. Therefore, it must be the case that delaying the release would not have caused OmniCorp to lose its primary source of funding, or the vulnerabilities compromised sensitive user financial data.
- If ZenithTech is justified in releasing its new payment processing application with known security vulnerabilities, then it must be true that the vulnerabilities do not put sensitive user financial data at risk.Answer
- EGlobalApp's newly released software contains security vulnerabilities that compromise sensitive user financial data. Because delaying the release would have cost the company its primary funding, GlobalApp's actions were partially justified.
Answer
The correct judgments are the one regarding Apex Systems and the one regarding ZenithTech.
The correct options properly follow the logical flow of the original principle. The principle establishes that being justified guarantees two things: delaying would cost funding, and financial data is safe. Therefore, if a company is justified, we absolutely know financial data is safe (direct application). Conversely, if delaying would NOT cost funding, one of the mandatory requirements is missing, meaning the company cannot possibly be justified (contrapositive).
Step-by-Step Solution
Key Concept
Conditional Logic and Principle Application