← Curriculum /E-services and digital channels /Account security and verifying who you are speaking to

Quiz: Account security and verifying who you are speaking to

6 questions

How this works

Answer every question. Select-all questions are marked all-or-nothing — ticking every box scores zero, not partial credit.
Submit once. You will see which you got right, and an explanation for every question including the ones you answered correctly.
Your score is recorded beside your progress. It does not unlock or revoke anything — marking this tutorial complete stays your call, before or after the quiz.
Retake it whenever you like. Every attempt is kept, so improving over three tries is visible rather than overwritten.

1 A caller asks only whether a particular name matches a particular social insurance number. Is answering that a disclosure? Only if the caller then asks a follow-up question No — no tax information is being given out Yes — confirming that someone is a CRA client, or that a name matches a SIN, is itself a disclosure of taxpayer information No, provided the caller supplied both pieces of information first

Answer key unconfirmed — rests on 2 unverified claims.

2 A caller offers to read out the one-time passcode she has just received, to prove who she is. What is the correct handling? Accept it — it is a strong proof of identity Ask her to enter it into the portal and read back the confirmation Do not take it: CRA does not ask a taxpayer to disclose a one-time passcode to an agent Accept it only if she also confirms her address

Answer key unconfirmed — rests on 1 unverified claim.

3 A taxpayer received a multi-factor authentication passcode he did not request. What does that indicate? Nothing — unrequested passcodes are routine His session timed out and the system reissued the code Another party may hold his account password and be attempting to sign in A system error; passcodes are sometimes issued in duplicate

Answer key unconfirmed — rests on 1 unverified claim.

4 What must be established before information is disclosed to someone calling as a representative? Select all that apply.

Select all that apply.

The authorisation covers the specific account in question Their identity is verified The taxpayer is contacted to reconfirm on each call They are separately confirmed as authorised on the account The level of access on the authorisation covers what is being asked

Answer key unconfirmed — rests on 3 unverified claims.

5 Where do CRA's confidentiality obligations in respect of taxpayer information come from? CRA's internal privacy policy The Income Tax Act The terms of service of CRA's online portals The Taxpayer Bill of Rights

Answer key unconfirmed — rests on 1 unverified claim.

6 Which multi-factor authentication options has CRA offered? Select all that apply.

Select all that apply.

A code read out to the taxpayer by a CRA agent A passcode generated by an authenticator application A security question chosen at registration A one-time passcode sent to a registered telephone number

Answer key unconfirmed — rests on 3 unverified claims.

Unanswered questions are marked wrong. There is no partial credit.