FCP Network Fundamentals 2

Question 1

Which transport layer protocol does FIDO2 WebAuthn rely on to ensure confidentiality between client and server?

Accepted Answer

TLS 1.2 or higher

Answer

WebAuthn requires TLS 1.2 or higher to protect the channel over which authenticator assertions are transmitted.

Question 2

What role does DNS play in the FIDO2 authentication flow?

Accepted Answer

It resolves the relying party ID to verify the origin domain matches the RP ID

Answer

DNS resolution of the origin domain is implicitly used by the browser to verify the RP ID is a registrable domain suffix of the origin.

Question 3

When a FIDO client communicates with a roaming authenticator over Bluetooth Low Energy, which network topology is used?

Accepted Answer

Point-to-point piconet

Answer

BLE uses a point-to-point piconet where one device acts as central (the client platform) and the other as peripheral (the authenticator).

Question 4

Which port is standardly used for FIDO MDS3 (Metadata Service) HTTPS fetch operations?

Accepted Answer

443

Answer

FIDO MDS3 metadata is fetched over standard HTTPS on port 443.

Question 5

In a corporate network, a proxy server intercepts TLS traffic. What impact does TLS inspection have on FIDO2 authentication?

Accepted Answer

It breaks origin binding because the browser sees the proxy certificate, not the server's

Answer

TLS inspection (man-in-the-middle proxy) changes the origin seen by the browser, which can break WebAuthn's relying party origin validation.

(FCP) FIDO Certified Professional Practice Test