FCP FIDO Authentication Methods 3

Question 1

Which FIDO2 extension allows an authenticator to report the method used for user verification (e.g., fingerprint vs. PIN)?

Accepted Answer

uvm (User Verification Method)

Answer

The 'uvm' extension returns a matrix of user verification method descriptors indicating how the authenticator performed UV during the ceremony.

Question 2

An enterprise requires that only authenticators with FIPS 140-2 Level 3 certification are trusted. Which FIDO mechanism enables enforcement of this policy?

Accepted Answer

Using metadata from the FIDO Metadata Service (MDS) to filter by authenticator certification level

Answer

The FIDO Metadata Service (MDS) publishes authenticator metadata including certification levels, enabling relying parties to accept or reject authenticators based on those properties.

Question 3

What is the 'counter' value in authenticatorData used for?

Accepted Answer

Detecting cloned authenticators by identifying unexpected decreases or repeated values

Answer

Each authentication increments the authenticator's signature counter; if the relying party receives a counter value not greater than the stored value, it may indicate a cloned authenticator.

Question 4

Which CTAP2 command is used by a client platform to request a new credential from a roaming authenticator?

Accepted Answer

authenticatorMakeCredential

Answer

The authenticatorMakeCredential CTAP2 command instructs the authenticator to generate a new public-key credential pair and return the attestation object.

Question 5

A user registers a FIDO2 security key on a laptop, then attempts to use it on a different laptop. Which statement is true?

Accepted Answer

The roaming authenticator can be used on any platform because the credential is stored on the key itself

Answer

Roaming authenticators store the credential (or the key material to derive it) internally, making them portable across any compliant client platform.

(FCP) FIDO Certified Professional Practice Test

(FCP) FIDO Certified Professional Practice Test

FCP FIDO Authentication Methods 3