CIPA Digital Identity & Online Security Flashcards

What is 'account takeover' (ATO) fraud?

Answer: Gaining unauthorized access to an existing account to commit fraud

Account takeover fraud occurs when a criminal gains unauthorized access to a legitimate user's existing account, typically to steal funds or personal data.

Which of the following is a recommended best practice for creating strong passwords?

Answer: Using a mix of uppercase, lowercase, numbers, and symbols of at least 12 characters

Strong passwords combine uppercase and lowercase letters, numbers, and symbols, and should be at least 12 characters long to resist brute-force attacks.

What role does a password manager play in identity protection?

Answer: It generates and securely stores unique, complex passwords for each account

A password manager generates and encrypts unique, complex passwords for each account, reducing the risk from password reuse and weak credentials.

A client receives an email appearing to be from their bank asking them to verify their login credentials. This is most likely an example of:

Answer: Spear phishing

Spear phishing is a targeted phishing attack that appears to come from a trusted source, such as a bank, to trick the recipient into revealing credentials.

Why should clients be cautious about using public Wi-Fi networks for sensitive transactions?

Answer: Attackers can intercept unencrypted data transmitted over unsecured networks

On unsecured public Wi-Fi, attackers can use packet sniffing or man-in-the-middle techniques to intercept unencrypted sensitive data such as login credentials.

What is the purpose of a Virtual Private Network (VPN) in the context of identity protection?

Answer: To encrypt internet traffic and mask the user's IP address

A VPN encrypts the user's internet traffic and conceals their IP address, making it more difficult for attackers or third parties to intercept data or track online activity.