CIPA CIPA Digital Identity & Online Security 2

Question 1

What is 'account takeover' (ATO) fraud?

Accepted Answer

Gaining unauthorized access to an existing account to commit fraud

Answer

Account takeover fraud occurs when a criminal gains unauthorized access to a legitimate user's existing account, typically to steal funds or personal data.

Question 2

Which of the following is a recommended best practice for creating strong passwords?

Accepted Answer

Using a mix of uppercase, lowercase, numbers, and symbols of at least 12 characters

Answer

Strong passwords combine uppercase and lowercase letters, numbers, and symbols, and should be at least 12 characters long to resist brute-force attacks.

Question 3

What role does a password manager play in identity protection?

Accepted Answer

It generates and securely stores unique, complex passwords for each account

Answer

A password manager generates and encrypts unique, complex passwords for each account, reducing the risk from password reuse and weak credentials.

Question 4

A client receives an email appearing to be from their bank asking them to verify their login credentials. This is most likely an example of:

Accepted Answer

Spear phishing

Answer

Spear phishing is a targeted phishing attack that appears to come from a trusted source, such as a bank, to trick the recipient into revealing credentials.

Question 5

Why should clients be cautious about using public Wi-Fi networks for sensitive transactions?

Accepted Answer

Attackers can intercept unencrypted data transmitted over unsecured networks

Answer

On unsecured public Wi-Fi, attackers can use packet sniffing or man-in-the-middle techniques to intercept unencrypted sensitive data such as login credentials.

(CIPA) Certified Identity Protection Advisor Practice Test

(CIPA) Certified Identity Protection Advisor Practice Test

CIPA CIPA Digital Identity & Online Security 2