Practice Test Geeks(FCP) FIDO Certified Professional Practice Test
← All FCP Flashcard Decks

Database Management Flashcards

7 cards from real FCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Database Management flashcards as text

  1. In a FIDO2 relying party database, what is the correct data type to use for storing a credential's public key?

    Answer: BLOB or BYTEA (binary large object)

    Public keys are binary data and must be stored as a binary large object (BLOB/BYTEA) to preserve byte-exact fidelity.

  2. Which field in the FIDO2 credential record uniquely identifies a credential within a specific relying party?

    Answer: credential_id

    The credential_id is the unique identifier assigned by the authenticator that distinguishes each credential at the relying party.

  3. A FIDO2 database schema must enforce that the combination of (rpId, credential_id) is unique. What type of constraint achieves this?

    Answer: COMPOSITE UNIQUE constraint

    A composite unique constraint on (rpId, credential_id) ensures no two credentials share the same ID under the same relying party.

  4. Why must the sign_count value in a FIDO2 credential record be updated atomically with its validation check?

    Answer: To prevent race conditions that could allow replay attacks

    Atomic read-validate-write of the sign_count prevents concurrent requests from exploiting a window where a replayed assertion could pass.

  5. In a FIDO2 credential store, the 'user_handle' is best described as:

    Answer: An opaque byte sequence that maps a credential to a user account

    The user_handle is an opaque, server-generated byte sequence that links a credential to a user without exposing PII to the authenticator.

  6. Which indexing strategy is most appropriate for a FIDO2 credential table expected to handle millions of authentication lookups per day?

    Answer: B-tree index on credential_id

    A B-tree index on credential_id enables O(log n) lookups, making authentication queries fast at scale.

  7. When archiving deactivated FIDO2 credentials, which practice aligns with both security and auditability requirements?

    Answer: Soft delete with a deactivated_at timestamp and retain for the audit period

    Soft deletes preserve audit trails while preventing the credential from being used, satisfying both security and compliance needs.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. pearsonvue.com — Test delivery, eligibility, fees, renewal, retake fee, retake policy, score release, score validity, exam information · verified Nov 2026