Virtual Assistant Professional Ethics and Security 3 — Questions and Answers
Question 1: A client shares confidential business plans with you. Under a typical confidentiality agreement, you may:
- Use the information only to perform the agreed work (Correct answer)
- Share highlights with your other clients for feedback
- Discuss it openly in a freelancer forum
- Post anonymized parts on your portfolio
Correct answer: Use the information only to perform the agreed work
Confidential information may only be used to perform the agreed-upon work, nothing more.
Question 2: You realize you accidentally sent Client A's invoice to Client B. The best response is to:
- Notify both clients promptly and request deletion of the misdirected email (Correct answer)
- Pretend it never happened and hope nobody notices
- Delete the sent email so there is no record
- Blame the email provider for the error
Correct answer: Notify both clients promptly and request deletion of the misdirected email
Promptly disclosing the data leak and requesting deletion limits harm and maintains trust.
Question 3: Which password practice is strongest for managing dozens of client accounts?
- Unique, long passwords generated and stored in a password manager (Correct answer)
- One strong password reused across all accounts
- Simple passwords you can remember easily
- Passwords written on sticky notes by your monitor
Correct answer: Unique, long passwords generated and stored in a password manager
Unique generated passwords in a manager prevent one breach from compromising every account.
Question 4: A potential client offers double pay to scrape personal data from a competitor's private database. You should:
- Refuse because unauthorized access and data theft are illegal (Correct answer)
- Accept since the pay is good
- Do it but delete logs afterward
- Subcontract it to avoid liability
Correct answer: Refuse because unauthorized access and data theft are illegal
Accessing a private database without authorization is illegal and unethical regardless of pay.
Question 5: Regularly updating software and operating systems mainly helps by:
- Patching known security vulnerabilities that attackers exploit (Correct answer)
- Making your screen brighter
- Increasing your typing speed
- Reducing your monthly subscription cost
Correct answer: Patching known security vulnerabilities that attackers exploit
Updates patch known vulnerabilities, closing entry points that attackers exploit.
Question 6: A conflict of interest arises when a VA:
- Works for two direct competitors with access to sensitive data (Correct answer)
- Has more than one client in different industries
- Takes a vacation day
- Uses a project management tool
Correct answer: Works for two direct competitors with access to sensitive data
Serving two direct competitors with sensitive access creates a conflict of interest that must be disclosed or avoided.
Question 7: What should you verify before clicking a link in a client's email request to change payment details?
- Confirm the request directly with the client through a known channel (Correct answer)
- That the email font looks professional
- That the email arrived during business hours
- That the subject line is in all caps
Correct answer: Confirm the request directly with the client through a known channel
Verifying payment-change requests through a separate known channel prevents business email compromise fraud.
A client shares confidential business plans with you.
Under a typical confidentiality agreement, you may: