CIAM Identity Proofing and Verification 2

Question 1

NIST SP 800-63A's IAL3 (Identity Assurance Level 3) requires which verification method not mandated at IAL2?

Accepted Answer

In-person proofing with a trained operator or Trusted Referee

Answer

Remote document scanning

Answer

Knowledge-based authentication

Answer

Self-assertion of identity attributes

Question 2

What is 'synthetic identity fraud' in the context of identity proofing?

Accepted Answer

Creating a fictitious identity by combining real and fabricated personally identifiable information

Answer

Using stolen credentials to impersonate an existing individual

Answer

Forging physical identity documents for in-person proofing

Answer

Replaying captured biometric data to defeat liveness detection

Question 3

During remote identity proofing at IAL2, which of the following is typically required?

Accepted Answer

Automated validation of identity document images and a selfie comparison

Answer

Submission of a handwritten notarized affidavit

Answer

In-person biometric capture at a government office

Answer

An existing federated identity from a social media provider

Question 4

What does 'document authenticity verification' aim to confirm during identity proofing?

Accepted Answer

That the identity document is genuine and has not been tampered with or forged

Answer

That the document's expiration date is in the future

Answer

That the document matches the format preferred by the relying party

Answer

That the document has been scanned at sufficient resolution

Question 5

Which type of attack specifically targets identity proofing systems by submitting fraudulent or stolen identity documents?

Accepted Answer

Identity document fraud

Answer

Credential stuffing

Answer

Session hijacking

Answer

SQL injection

Question 6

In NIST SP 800-63A, which term describes the process of determining that the identity evidence provided refers to a single, unique individual?

Accepted Answer

Identity resolution

Answer

Identity validation

Answer

Identity binding

Answer

Identity federation

Question 7

What is the key distinction between IAL1 and IAL2 per NIST SP 800-63A?

Accepted Answer

IAL1 allows self-asserted identity with no proofing while IAL2 requires validated identity evidence

Answer

IAL1 requires multi-factor authentication while IAL2 uses single-factor

Answer

IAL1 mandates biometrics while IAL2 uses knowledge factors only

Answer

IAL1 is for federal systems while IAL2 applies to commercial entities