FCP Security Benefits of FIDO 2

Question 1

How does FIDO authentication protect against credential stuffing attacks?

Accepted Answer

By binding credentials to a specific origin so stolen data from one site cannot be used on another

Answer

FIDO credentials are origin-bound, meaning a credential registered at one site is cryptographically tied to that domain and cannot be replayed at another site even if stolen.

Question 2

Which property of FIDO authenticators prevents a compromised server from revealing users' private keys?

Accepted Answer

The private key never leaves the authenticator device

Answer

FIDO private keys are generated and stored securely within the authenticator and are never transmitted to or stored on the relying party's server.

Question 3

What security advantage does FIDO provide over OTP-based two-factor authentication?

Accepted Answer

FIDO is not susceptible to real-time phishing interception of one-time codes

Answer

OTP codes can be intercepted and relayed in real time by a phishing site, whereas FIDO's challenge-response protocol bound to the origin prevents this attack.

Question 4

In the context of FIDO security, what does 'user verification' specifically protect against?

Accepted Answer

An unauthorized person using a stolen or found authenticator

Answer

User verification (PIN, biometric, etc.) ensures that physical possession of the authenticator alone is insufficient — the legitimate user must also prove identity locally.

Question 5

Why is FIDO considered resistant to server-side breaches compared to password-based authentication?

Accepted Answer

Servers only store public keys, which are not useful for authentication without the private key

Answer

A FIDO relying party stores only public keys; even if an attacker obtains the entire credential database, they cannot authenticate as any user without the corresponding private key on the user's device.

(FCP) FIDO Certified Professional Practice Test

(FCP) FIDO Certified Professional Practice Test

FCP Security Benefits of FIDO 2