An organization is concerned about its cybersecurity after identifying unauthorized records in its payroll database.

The consultant was hired by the organization to test its cybersecurity and identify vulnerabilities. This is the role of a white hat hacker, also known as an ethical hacker.

Why White Hat Hacker?

White hat hackers conduct security assessments legally and ethically to help organizations strengthen their cyber defenses.

The consultant demonstrated SQL injection attacks in a controlled manner to expose weaknesses without malicious intent.

Ethical hacking is a recognized practice under cybersecurity frameworks like NIST and ISO 27001.

A. Cybercriminal – Engages in illegal hacking for personal or financial gain, whereas the consultant was hired to help the organization.

C. Cyberterrorist – Motivated by political or ideological goals, not cybersecurity testing.

D. Black Hat Hacker – Malicious hackers who exploit vulnerabilities for personal benefit, unlike ethical hackers.

Why Not the Other Options?Thus, the correct answer is B. White Hat Hacker, as the consultant was conducting authorized penetration testing.

CEH (Certified Ethical Hacker) Guidelines.

National Institute of Standards and Technology (NIST) Cybersecurity Framework.

OWASP Top Ten Security Risks (2023).

References in Ethics in Technology: