CIPA Client Education & Protection Strategies 2

Question 1

A client wants to protect their Social Security number from misuse. Which practice is MOST effective?

Accepted Answer

Share the SSN only when legally required and verify requestors

Answer

SSNs cannot be changed routinely, so limiting disclosure to legally required situations and verifying who is asking is the best protective practice.

Question 2

Which of the following best describes a 'credit freeze' compared to a 'fraud alert'?

Accepted Answer

A credit freeze blocks new credit inquiries; a fraud alert requests extra verification

Answer

A credit freeze restricts access to the credit file entirely, while a fraud alert asks creditors to take extra steps to verify identity before extending credit.

Question 3

A client receives an email asking them to verify their bank account details via a link. What type of attack is this?

Accepted Answer

Phishing

Answer

Phishing uses deceptive emails that impersonate legitimate institutions to trick recipients into revealing sensitive information.

Question 4

When educating clients about password security, which strategy provides the strongest protection?

Accepted Answer

Creating unique, complex passwords for each account and storing them in a password manager

Answer

Unique, complex passwords for each account prevent credential stuffing attacks, and a reputable password manager securely stores them.

Question 5

A client asks about the 'dark web.' What is the MOST accurate description to provide?

Accepted Answer

An encrypted portion of the internet where stolen data is frequently bought and sold

Answer

The dark web is an encrypted overlay network often used for illicit activity, including the sale of stolen personally identifiable information.

(CIPA) Certified Identity Protection Advisor Practice Test

(CIPA) Certified Identity Protection Advisor Practice Test

CIPA Client Education & Protection Strategies 2