FIDO Communication & Client Relations 3

Question 1

A financial services client asks how FIDO addresses regulatory requirements for strong customer authentication (SCA). What is the best response?

Accepted Answer

FIDO satisfies SCA by combining possession of the authenticator device with user verification such as a PIN or biometric

Answer

FIDO meets SCA requirements by combining something-you-have (the authenticator) with something-you-know or something-you-are (PIN or biometric), satisfying multi-factor authentication mandates.

Question 2

A client asks whether passkeys and FIDO2 credentials are the same thing. How should you clarify?

Accepted Answer

Passkeys are a specific implementation of FIDO2 credentials that support multi-device sync via cloud backup

Answer

Passkeys are FIDO2 discoverable credentials (resident keys) that can optionally be synced across devices using platform cloud services, making them a user-friendly evolution of FIDO2.

Question 3

When explaining FIDO to a non-technical client audience, which analogy best describes how a FIDO security key works?

Accepted Answer

It works like a unique digital seal: the key signs a server challenge, proving identity without sending any secret

Answer

A FIDO key signs a server-generated challenge with a private key, proving possession without ever transmitting the secret — analogous to signing a document with a unique seal.

Question 4

A client reports that some employees are reluctant to use biometric authenticators due to privacy concerns. What is the most accurate and reassuring explanation?

Accepted Answer

Biometric data never leaves the device; the authenticator only sends a cryptographic signature after local verification

Answer

In FIDO, biometric matching happens entirely on the device; no biometric data is transmitted to or stored on the server, which directly addresses user privacy concerns.

Question 5

A client asks how FIDO handles the scenario where an employee's registered device is stolen. What is the correct guidance?

Accepted Answer

The credential requires user verification (PIN or biometric), so a stolen device alone is insufficient to authenticate

Answer

FIDO credentials requiring user verification mean a stolen device cannot be used to authenticate unless the attacker also defeats the local PIN or biometric check.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO Communication & Client Relations 3