CIAM Identity Proofing and Verification

Question 1

According to NIST SP 800-63A, which Identity Assurance Level (IAL) requires in-person or remote proofing with validation of a government-issued ID?

Accepted Answer

IAL2

Answer

IAL1

Answer

IAL3

Answer

IAL0

Question 2

What is the primary purpose of 'identity proofing' in the context of Identity and Access Management?

Accepted Answer

Establishing confidence that a claimed identity corresponds to a real individual

Answer

Granting access permissions to verified users

Answer

Encrypting identity credentials for secure storage

Answer

Auditing user activity after authentication

Question 3

Which NIST Special Publication specifically provides guidelines for digital identity proofing and enrollment?

Accepted Answer

NIST SP 800-63A

Answer

NIST SP 800-53

Answer

NIST SP 800-171

Answer

NIST SP 800-37

Question 4

What is 'liveness detection' used for in identity proofing?

Accepted Answer

Verifying that a biometric sample comes from a live person and not a spoof

Answer

Determining if an identity document has expired

Answer

Confirming that a user's session is still active

Answer

Detecting fraudulent activity in audit logs

Question 5

In identity proofing, a 'breeder document' refers to which of the following?

Accepted Answer

A foundational identity document used to obtain other identity credentials

Answer

A document used to generate cryptographic keys

Answer

A document that proves organizational membership

Answer

A secondary ID used only for low-assurance proofing

Question 6

Which of the following best describes 'identity binding' in the enrollment process?

Accepted Answer

Linking an authenticator or credential to a verified identity

Answer

Associating access permissions with a user role

Answer

Encrypting a user's identity attributes at rest

Answer

Federating an identity across multiple domains

Question 7

Knowledge-Based Authentication (KBA) used during identity proofing is primarily intended to:

Accepted Answer

Verify that a claimant has knowledge of information associated with their identity

Answer

Replace multi-factor authentication for high-assurance systems

Answer

Encrypt knowledge factors for secure storage

Answer

Generate one-time passwords for remote access