FIDO Compliance, Certification & Interoperability 5

Question 1

Which industry regulation or standard most directly benefits from FIDO-certified authenticators being used as a strong authentication factor?

Accepted Answer

PCI DSS multi-factor authentication requirements

Answer

PCI DSS explicitly requires multi-factor authentication for access to cardholder data environments, and FIDO-certified authenticators satisfy this MFA requirement.

Question 2

What distinguishes FIDO Certification Level 1+ (L1+) from standard Level 1?

Accepted Answer

L1+ requires the authenticator to run in a restricted operating environment such as a TEE or SE

Answer

L1+ adds the requirement that sensitive operations run in a hardware-restricted environment like a Trusted Execution Environment (TEE) or Secure Element (SE).

Question 3

When a FIDO-certified authenticator vendor wants to expand into the European market, which additional certification requirement may apply for government use cases?

Accepted Answer

Common Criteria evaluation under eIDAS or national schemes

Answer

European government use cases often require Common Criteria evaluation aligned with eIDAS or national identity schemes, beyond FIDO Alliance certification.

Question 4

In the FIDO Conformance Test Tools, what type of tests are classified as 'P' (positive) tests?

Accepted Answer

Tests that verify the authenticator correctly handles a well-formed, valid request

Answer

Positive ('P') tests verify that the authenticator correctly processes and responds to valid, well-formed protocol requests as specified.

Question 5

Which FIDO specification defines the biometric performance requirements that a biometric authenticator must meet to achieve Biometric Certification?

Accepted Answer

FIDO Biometric Requirements specification

Answer

The FIDO Biometric Requirements specification sets the FAR, FRR, and presentation attack detection thresholds that biometric authenticators must meet for FIDO Biometric Certification.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO Compliance, Certification & Interoperability 5