FIDO Authentication Standards & Protocols 2

Question 1

Which FIDO2 component is responsible for storing credentials and performing cryptographic operations?

Accepted Answer

Authenticator

Answer

The authenticator stores private keys and performs cryptographic signing operations during FIDO2 authentication.

Question 2

What does the 'origin' field in a WebAuthn ceremony protect against?

Accepted Answer

Phishing attacks

Answer

The origin binding in WebAuthn ties credentials to a specific domain, making them unusable on phishing sites.

Question 3

In CTAP2, what is the purpose of the 'pinUvAuthProtocol' parameter?

Accepted Answer

Specifies the PIN/UV authentication protocol version to use

Answer

The 'pinUvAuthProtocol' parameter specifies which PIN/UV Auth Protocol version the platform and authenticator should use for PIN operations.

Question 4

Which assertion type does FIDO UAF use that is NOT present in WebAuthn/FIDO2?

Accepted Answer

ASM-based transaction confirmation

Answer

FIDO UAF introduced the Authenticator Specific Module (ASM) layer for transaction confirmation, which was not carried over into the WebAuthn/FIDO2 architecture.

Question 5

What is the maximum number of times a FIDO2 authenticator can attempt PIN entry before the PIN is blocked?

Accepted Answer

8

Answer

CTAP2 allows up to 8 PIN retries before the PIN is permanently blocked and the authenticator must be reset.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO Authentication Standards & Protocols 2