← All CIAM Flashcard Decks

Identity Proofing and Verification Flashcards

7 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Identity Proofing and Verification flashcards as text
  1. What is the role of a 'Trusted Referee' in NIST SP 800-63A identity proofing?

    Answer: A trained individual who assists applicants unable to meet standard in-person proofing requirements

    A Trusted Referee is a trained individual (such as a notary, medical professional, or agency representative) who can vouch for an applicant's identity when the applicant cannot complete standard proofing, enabling remote or assisted IAL3 proofing.

  2. Which of the following best describes 'address of record' verification in identity proofing?

    Answer: Confirming a physical or digital address associated with the applicant to establish contact and identity

    Address of record verification confirms a physical or digital address tied to the individual, typically through enrollment codes sent by mail or verified credit bureau records, establishing a real-world connection.

  3. What is 'enrollment code' delivery used for in remote identity proofing?

    Answer: Confirming that the applicant has access to a verified address of record

    An enrollment code (often delivered via postal mail or SMS to a verified phone number) confirms that the applicant controls the address of record associated with the claimed identity.

  4. In identity proofing, 'evidence strength' as defined in NIST SP 800-63A primarily refers to:

    Answer: The level of confidence that identity evidence is genuine and accurately identifies the individual

    Evidence strength categorizes identity documents (Unacceptable, Weak, Fair, Strong, Superior) based on how reliably they establish uniqueness and are resistant to fraud, forgery, and misuse.

  5. Which proofing method allows IAL3-equivalent remote identity proofing using a live video call with a trained operator?

    Answer: Supervised remote proofing

    Supervised remote proofing uses a live, real-time video session monitored by a trained operator who can examine documents, capture biometrics, and interact with the applicant to meet IAL3 requirements without physical presence.

  6. What does 'identity validation' mean in the NIST SP 800-63A proofing process?

    Answer: Confirming the applicant's claimed identity matches an authoritative source

    Identity validation confirms that the evidence provided is genuine (not forged) and that the identity information on the evidence is accurate by checking it against authoritative sources such as government databases.

  7. Which of the following represents the correct order of the three core phases in the NIST identity proofing process?

    Answer: Resolution → Validation → Verification

    NIST SP 800-63A defines the proofing process as: Resolution (identify a unique person) → Validation (confirm evidence is genuine) → Verification (confirm the applicant controls the identity), followed by binding.