Page |1
AFIP CERTIFICATION TEST 2025/2026 NEWEST ACTUAL
EXAM WITH COMPLETE QUESTIONS AND VERIFIED
ANSWERS |ALREADY GRADED A+|
What constitutes "customer information" under the Safeguards
Rule? -ANSWERS-Any record containing non-public personal
information about a customer of the dealership, whether in paper,
electronic, or other form, that is handled or maintained by or on
behalf of the dealership or its affiliates.
What does the Safeguard Rule require of dealerships? -
ANSWERS-1. You must designate an employee or employees to
coordinate your information security program.
2. You must identify reasonably foreseeable internal and external
risks to the security, confidentiality, and integrity of Customer
Information that could result in its unauthorized disclosure,
misuse, alteration or destruction.
3. You must develop and implement Customer Information
safeguards to control the risks you identify through the risk
assessment.
, Page |2
4. You must oversee service providers who take possession of
Customer Information.
5. You must evaluate and adjust your information security
program.
When and how should customers be notified if unauthorized
access to sensitive information occurs? -ANSWERS-The Final
Guidance on Response Programs requires customer notification if
it's determined that misuse of the information has occurred or that
it's reasonably possible it will occur.
What does the Disposal Rule require? -ANSWERS-Requires
entities that possess consumer information to properly dispose of
such information by taking reasonable measures to protect
against unauthorized access to, or use of, this information.
(True/False) In short, the use of any or a portion of the customer
information provided while completing a credit application should
be considered nonpublic personal information. -ANSWERS-True
, Page |3
What types of transactions are subject to the Gramm-Leach-Bliley
Act? -ANSWERS--Consumer Leases
-Installment Sale Agreements on vehicles for personal, household
or family use
Under the _______ Rule, 1) a customer must receive certain
notices, 2) a dealership's right to use customer information is
limited, and 3) a dealership must allow the customer to impose
more restrictions (such as opting out). -ANSWERS-Privacy
The Safeguards Rule applies to customer information in _______
form. -ANSWERS-Paper & Electronic
(True/False) According to AFIP's suggested best practices, an
initial privacy notice should be issued to any individual whose
nonpublic personal information will be used to solicit a willing
funding source. -ANSWERS-True
(True/False) The Gramm-Leach-Bliley Act addresses the use and
protection of consumers' nonpublic personal information. -
ANSWERS-True
, Page |4
Best practices dictate that creditors protect NPI from who? -
ANSWERS-Customers & Consumers
Which two Rules implement the Gramm-Leach-Bliley Act? -
ANSWERS-Safeguard & Privacy Rule
As long as the required elements of the privacy notice are
disclosed to the customer, the information can be given to the
customer _______. -ANSWERS-In writing
(True/False) While many states have their own privacy notice
requirements, dealerships may ignore those when drafting their
privacy notices because the federal law about privacy notices
always trumps state law. -ANSWERS-False
The service provider exception to the Privacy Rule allows
_______ to contact your customers. -ANSWERS--An independent
firm with which you joinly offer financial products and services
AFIP CERTIFICATION TEST 2025/2026 NEWEST ACTUAL
EXAM WITH COMPLETE QUESTIONS AND VERIFIED
ANSWERS |ALREADY GRADED A+|
What constitutes "customer information" under the Safeguards
Rule? -ANSWERS-Any record containing non-public personal
information about a customer of the dealership, whether in paper,
electronic, or other form, that is handled or maintained by or on
behalf of the dealership or its affiliates.
What does the Safeguard Rule require of dealerships? -
ANSWERS-1. You must designate an employee or employees to
coordinate your information security program.
2. You must identify reasonably foreseeable internal and external
risks to the security, confidentiality, and integrity of Customer
Information that could result in its unauthorized disclosure,
misuse, alteration or destruction.
3. You must develop and implement Customer Information
safeguards to control the risks you identify through the risk
assessment.
, Page |2
4. You must oversee service providers who take possession of
Customer Information.
5. You must evaluate and adjust your information security
program.
When and how should customers be notified if unauthorized
access to sensitive information occurs? -ANSWERS-The Final
Guidance on Response Programs requires customer notification if
it's determined that misuse of the information has occurred or that
it's reasonably possible it will occur.
What does the Disposal Rule require? -ANSWERS-Requires
entities that possess consumer information to properly dispose of
such information by taking reasonable measures to protect
against unauthorized access to, or use of, this information.
(True/False) In short, the use of any or a portion of the customer
information provided while completing a credit application should
be considered nonpublic personal information. -ANSWERS-True
, Page |3
What types of transactions are subject to the Gramm-Leach-Bliley
Act? -ANSWERS--Consumer Leases
-Installment Sale Agreements on vehicles for personal, household
or family use
Under the _______ Rule, 1) a customer must receive certain
notices, 2) a dealership's right to use customer information is
limited, and 3) a dealership must allow the customer to impose
more restrictions (such as opting out). -ANSWERS-Privacy
The Safeguards Rule applies to customer information in _______
form. -ANSWERS-Paper & Electronic
(True/False) According to AFIP's suggested best practices, an
initial privacy notice should be issued to any individual whose
nonpublic personal information will be used to solicit a willing
funding source. -ANSWERS-True
(True/False) The Gramm-Leach-Bliley Act addresses the use and
protection of consumers' nonpublic personal information. -
ANSWERS-True
, Page |4
Best practices dictate that creditors protect NPI from who? -
ANSWERS-Customers & Consumers
Which two Rules implement the Gramm-Leach-Bliley Act? -
ANSWERS-Safeguard & Privacy Rule
As long as the required elements of the privacy notice are
disclosed to the customer, the information can be given to the
customer _______. -ANSWERS-In writing
(True/False) While many states have their own privacy notice
requirements, dealerships may ignore those when drafting their
privacy notices because the federal law about privacy notices
always trumps state law. -ANSWERS-False
The service provider exception to the Privacy Rule allows
_______ to contact your customers. -ANSWERS--An independent
firm with which you joinly offer financial products and services
