Identity Proofing and Verification Flashcards
7 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Identity Proofing and Verification flashcards as text
According to NIST SP 800-63A, which Identity Assurance Level (IAL) requires in-person or remote proofing with validation of a government-issued ID?
Answer: IAL2
IAL2 requires remote or in-person identity proofing with validation and verification of at least one piece of identity evidence such as a government-issued ID.
What is the primary purpose of 'identity proofing' in the context of Identity and Access Management?
Answer: Establishing confidence that a claimed identity corresponds to a real individual
Identity proofing is the process of establishing confidence that a subject claiming an identity is actually who they claim to be, based on evidence and validation.
Which NIST Special Publication specifically provides guidelines for digital identity proofing and enrollment?
Answer: NIST SP 800-63A
NIST SP 800-63A specifically addresses enrollment and identity proofing, defining the processes and requirements for each Identity Assurance Level.
What is 'liveness detection' used for in identity proofing?
Answer: Verifying that a biometric sample comes from a live person and not a spoof
Liveness detection is a technique used to prevent spoofing attacks by confirming that a biometric sample (e.g., a facial scan) is captured from a live, physically present person rather than a photo or video replay.
In identity proofing, a 'breeder document' refers to which of the following?
Answer: A foundational identity document used to obtain other identity credentials
A breeder document is a foundational document, such as a birth certificate or passport, that can be used to obtain other identity credentials like a driver's license or Social Security card.
Which of the following best describes 'identity binding' in the enrollment process?
Answer: Linking an authenticator or credential to a verified identity
Identity binding is the process of associating an authenticator (such as a hardware token or password) with a proofed identity, ensuring the credential is controlled by the rightful individual.
Knowledge-Based Authentication (KBA) used during identity proofing is primarily intended to:
Answer: Verify that a claimant has knowledge of information associated with their identity
KBA leverages questions about information associated with an individual (e.g., previous addresses, financial records) to provide additional evidence that the claimant controls the identity they are asserting.