CIAM Identity Proofing and Verification 3

Question 1

What is the role of a 'Trusted Referee' in NIST SP 800-63A identity proofing?

Accepted Answer

A trained individual who assists applicants unable to meet standard in-person proofing requirements

Answer

An automated system that validates document authenticity

Answer

A cryptographic authority that signs identity assertions

Answer

A third-party auditor who reviews IAL3 proofing sessions

Question 2

Which of the following best describes 'address of record' verification in identity proofing?

Accepted Answer

Confirming a physical or digital address associated with the applicant to establish contact and identity

Answer

Verifying that a user's IP address matches their registered country

Answer

Validating that an email address is not on a blocklist

Answer

Checking that a mailing address is formatted correctly

Question 3

What is 'enrollment code' delivery used for in remote identity proofing?

Accepted Answer

Confirming that the applicant has access to a verified address of record

Answer

Transmitting a temporary password for first login

Answer

Encoding identity attributes in a QR code format

Answer

Generating a cryptographic key for token binding

Question 4

In identity proofing, 'evidence strength' as defined in NIST SP 800-63A primarily refers to:

Accepted Answer

The level of confidence that identity evidence is genuine and accurately identifies the individual

Answer

The cryptographic strength of the credential issued after proofing

Answer

The number of documents submitted during the proofing process

Answer

The resolution quality of document images captured during remote proofing

Question 5

Which proofing method allows IAL3-equivalent remote identity proofing using a live video call with a trained operator?

Accepted Answer

Supervised remote proofing

Answer

Self-service remote proofing

Answer

Federated identity proofing

Answer

Knowledge-based remote proofing

Question 6

What does 'identity validation' mean in the NIST SP 800-63A proofing process?

Accepted Answer

Confirming the applicant's claimed identity matches an authoritative source

Answer

Verifying that an authenticator meets strength requirements

Answer

Determining that the identity attributes resolve to a unique person

Answer

Checking that a credential has not been revoked

Question 7

Which of the following represents the correct order of the three core phases in the NIST identity proofing process?

Accepted Answer

Resolution → Validation → Verification

Answer

Binding → Resolution → Validation

Answer

Validation → Resolution → Verification

Answer

Verification → Binding → Resolution