CIAM Identity Proofing and Verification 2

Question 1

NIST SP 800-63A's IAL3 (Identity Assurance Level 3) requires which verification method not mandated at IAL2?

Accepted Answer

In-person proofing with a trained operator or Trusted Referee

Answer

IAL3 requires in-person proofing (or an equivalent supervised remote session) conducted by a trained operator, providing the highest level of confidence in the identity being established.

Question 2

What is 'synthetic identity fraud' in the context of identity proofing?

Accepted Answer

Creating a fictitious identity by combining real and fabricated personally identifiable information

Answer

Synthetic identity fraud involves constructing a fake identity by blending real information (e.g., a legitimate Social Security Number) with fabricated details, making it harder to detect than traditional identity theft.

Question 3

During remote identity proofing at IAL2, which of the following is typically required?

Accepted Answer

Automated validation of identity document images and a selfie comparison

Answer

Remote IAL2 proofing typically requires the applicant to capture images of a government-issued identity document and a selfie, which are then validated and compared using automated systems.

Question 4

What does 'document authenticity verification' aim to confirm during identity proofing?

Accepted Answer

That the identity document is genuine and has not been tampered with or forged

Answer

Document authenticity verification checks security features, holograms, machine-readable zones, and other indicators to confirm a presented document is genuine and unaltered.

Question 5

Which type of attack specifically targets identity proofing systems by submitting fraudulent or stolen identity documents?

Accepted Answer

Identity document fraud

Answer

Identity document fraud involves presenting counterfeit, altered, or stolen documents during the proofing process in an attempt to fraudulently establish a new identity.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Proofing and Verification 2