Professional Ethics and Security Flashcards

A client shares confidential business plans with you. Under a typical confidentiality agreement, you may:

Answer: Use the information only to perform the agreed work

Confidential information may only be used to perform the agreed-upon work, nothing more.

You realize you accidentally sent Client A's invoice to Client B. The best response is to:

Answer: Notify both clients promptly and request deletion of the misdirected email

Promptly disclosing the data leak and requesting deletion limits harm and maintains trust.

Which password practice is strongest for managing dozens of client accounts?

Answer: Unique, long passwords generated and stored in a password manager

Unique generated passwords in a manager prevent one breach from compromising every account.

A potential client offers double pay to scrape personal data from a competitor's private database. You should:

Answer: Refuse because unauthorized access and data theft are illegal

Accessing a private database without authorization is illegal and unethical regardless of pay.

Regularly updating software and operating systems mainly helps by:

Answer: Patching known security vulnerabilities that attackers exploit

Updates patch known vulnerabilities, closing entry points that attackers exploit.

A conflict of interest arises when a VA:

Answer: Works for two direct competitors with access to sensitive data

Serving two direct competitors with sensitive access creates a conflict of interest that must be disclosed or avoided.

What should you verify before clicking a link in a client's email request to change payment details?

Answer: Confirm the request directly with the client through a known channel

Verifying payment-change requests through a separate known channel prevents business email compromise fraud.