CSA User Account & Access Management 2 — Questions and Answers
Question 1: A customer calls saying they cannot log in to their account after multiple failed attempts. What is the FIRST step a sales associate should take?
- Delete the account and create a new one
- Verify the customer's identity before making any account changes (Correct answer)
- Immediately reset the password without asking any questions
- Tell the customer to wait 24 hours and try again
Correct answer: Verify the customer's identity before making any account changes
Verifying the customer's identity first is essential to prevent unauthorized access and protect account security.
Question 2: Which of the following is a best practice when a customer requests a username change?
- Allow the change immediately to improve customer satisfaction
- Verify identity, update the username, and confirm the change with the customer (Correct answer)
- Refuse all username change requests as they pose security risks
- Only allow username changes if the customer has been a member for over a year
Correct answer: Verify identity, update the username, and confirm the change with the customer
Proper identity verification followed by the update and confirmation ensures security while meeting customer needs.
Question 3: A customer says their email address on file is incorrect and they are not receiving order confirmations. What should the associate do?
- Tell the customer to create a new account with the correct email
- Verify the customer's identity and update the email address in the system (Correct answer)
- Send order confirmations to any email address the customer provides without verification
- Escalate immediately to IT without helping the customer
Correct answer: Verify the customer's identity and update the email address in the system
Identity verification protects the account owner while updating the email ensures the customer receives important communications.
Question 4: What does 'account lockout' typically mean in a retail CRM system?
- The customer has been permanently banned from making purchases
- The account is temporarily inaccessible after too many failed login attempts (Correct answer)
- The customer's payment method has been declined multiple times
- The account has been flagged for fraudulent activity and deleted
Correct answer: The account is temporarily inaccessible after too many failed login attempts
Account lockout is a security feature that temporarily blocks access after repeated failed login attempts to prevent unauthorized access.
Question 5: A customer wants to add a secondary account holder to their profile. What information is typically required?
- Only the new person's name and phone number
- The primary account holder's consent and the secondary holder's identifying information (Correct answer)
- Only the primary account holder's permission with no additional information needed
- A written notarized letter authorizing the addition
Correct answer: The primary account holder's consent and the secondary holder's identifying information
Adding a secondary account holder requires the primary holder's authorization and the new holder's information to maintain proper account records.
Question 6: Which action is MOST appropriate when a customer requests access to another person's account claiming to be their spouse?
- Grant access immediately since spouses share finances
- Deny all access without exception to any third-party requests
- Verify the relationship and check if the account holder has authorized third-party access (Correct answer)
- Transfer ownership of the account to the spouse
Correct answer: Verify the relationship and check if the account holder has authorized third-party access
Account access for third parties requires proper authorization from the account holder, regardless of the claimed relationship.
Question 7: When a customer successfully resets their password, what should an associate do to complete the process?
- Archive the old password for security records
- Confirm the reset was successful and remind the customer to keep their credentials secure (Correct answer)
- Share the new password with the customer's emergency contact for backup
- Automatically enroll the customer in two-factor authentication without asking
Correct answer: Confirm the reset was successful and remind the customer to keep their credentials secure
Confirming the reset and advising on credential security completes the service interaction professionally and securely.
A customer calls saying they cannot log in to their account after multiple failed attempts.
What is the FIRST step a sales associate should take?