FCP FCP Identity and Access Management

Question 1

Which FIDO2 feature enables a user to authenticate without first providing a username, improving the sign-in UX?

Accepted Answer

Discoverable credentials (resident keys) with conditional UI

Answer

Discoverable credentials stored on the authenticator combined with WebAuthn's conditional UI allow users to authenticate without entering a username, creating a truly passwordless experience.

Question 2

How does FIDO2 complement a federated identity system that uses OpenID Connect (OIDC)?

Accepted Answer

FIDO2 can serve as the authentication factor at the IdP, strengthening the OIDC login

Answer

FIDO2 can be used as the authentication mechanism at an OIDC Identity Provider, ensuring the login step is phishing-resistant before the IdP issues tokens to relying parties.

Question 3

What is the primary IAM benefit of replacing passwords with FIDO passkeys for enterprise employees?

Accepted Answer

Removing the password attack surface (phishing, credential stuffing, reuse)

Answer

Passkeys eliminate passwords, removing the primary vector for phishing, credential stuffing, and password reuse attacks that compromise enterprise accounts.

Question 4

In a zero-trust architecture, how does FIDO2 authentication support continuous verification principles?

Accepted Answer

By providing strong, hardware-bound authentication assertions that can satisfy step-up auth requests

Answer

FIDO2 assertions are cryptographically strong and hardware-bound, making them suitable for satisfying step-up authentication challenges in zero-trust environments that require continuous verification.

Question 5

What is account recovery's greatest challenge in a passwordless FIDO deployment?

Accepted Answer

Providing secure re-enrollment when a user loses all registered authenticators

Answer

Account recovery is the hardest problem because the fallback path (if all authenticators are lost) can become the weakest link and potentially undermine FIDO's phishing resistance.

(FCP) FIDO Certified Professional Practice Test

(FCP) FIDO Certified Professional Practice Test

FCP FCP Identity and Access Management