CACs - Certified Application Counselor Privacy and Security Standards Questions and Answers

Question 1

A CAC is assisting a consumer at a busy enrollment event in a public space.
The CAC needs to step away from their laptop for a moment to retrieve a form.
What is the most important security action the CAC must take before leaving the computer?

Accepted Answer

Lock the computer screen.

Answer

Ask the consumer to watch the laptop.

Answer

Turn the screen brightness all the way down.

Answer

Close the web browser window showing the consumer's application.

Question 2

According to federal standards for protecting consumer Personally Identifiable Information (PII), which of the following is an approved method for destroying paper documents containing sensitive PII?

Accepted Answer

Using a cross-cut shredder to render the information unreconstructible.

Answer

Tearing the documents into several pieces before placing them in a trash can.

Answer

Placing the documents in a standard, unlocked office recycling bin.

Answer

Blacking out the consumer's name and address with a marker before discarding.

Question 3

Which of the following is a critical element that must be included in a consumer's written consent form before a CAC can access and use their PII?

Accepted Answer

The timeframe during which the consent is valid.

Answer

The name of the consumer's preferred health insurance plan.

Answer

A clause allowing the CAC to share the PII for marketing purposes.

Answer

The CAC's personal contact information.

Question 4

A CAC receives an email that appears to be from the Health Insurance Marketplace, asking them to click a link and "verify their account credentials immediately" to avoid deactivation. The email uses a generic greeting. What is the most appropriate action for the CAC to take?

Accepted Answer

Do not click the link, and report the email as a potential phishing attempt according to their organization's policy.

Answer

Click the link and enter the credentials as requested to avoid service disruption.

Answer

Reply to the email with the requested information to confirm their identity.

Answer

Forward the email to a colleague to ask if they also received it.

Question 5

When assisting consumers, a CAC is responsible for safeguarding their Personally Identifiable Information (PII). Which of the following is the BEST example of PII that must be protected?

Accepted Answer

The consumer's name combined with their Social Security Number.

Answer

The consumer's opinion on available health plans.

Answer

A list of hospitals in the consumer's local area.

Answer

An anonymized statistic about Marketplace enrollment in their state.

Question 6

Which of the following actions represents a violation of the 'principle of least privilege' regarding access to consumer PII?

Accepted Answer

Allowing all CACs at an organization to use a single, shared username and password for the system to make helping consumers faster.

Answer

Accessing only the financial section of an application to help a consumer with income questions.

Answer

Using a unique, complex password to log into the Marketplace portal.

Answer

Securing paper applications in a locked file cabinet at the end of the day.

A CAC is assisting a consumer at a busy enrollment event in a public space.The CAC needs to step away from their laptop for a moment to retrieve a form.What is the most important security action the CAC must take before leaving the computer?

A CAC is assisting a consumer at a busy enrollment event in a public space.
The CAC needs to step away from their laptop for a moment to retrieve a form.
What is the most important security action the CAC must take before leaving the computer?