FIDO Professional Standards & Competencies 2

Question 1

Which FIDO Alliance working group is primarily responsible for defining authenticator certification levels?

Accepted Answer

Certification Working Group (CWG)

Answer

The Certification Working Group (CWG) oversees authenticator certification programs and defines the levels and requirements.

Question 2

A FIDO2 authenticator must store a resident credential (discoverable credential) in which location?

Accepted Answer

Authenticator's secure internal storage

Answer

Discoverable credentials must be stored in the authenticator's secure internal storage so they can be presented without a credential ID hint.

Question 3

What is the primary purpose of the 'aaguid' field in a FIDO2 attestation statement?

Accepted Answer

To indicate the type and model of the authenticator

Answer

The AAGUID (Authenticator Attestation GUID) identifies the make and model of an authenticator, enabling relying parties to look up its metadata.

Question 4

Under FIDO professional standards, when implementing UV (User Verification) on a mobile authenticator, which biometric evaluation criterion is most critical?

Accepted Answer

FAR (False Acceptance Rate) must be below 1/10,000

Answer

FIDO standards require biometric authenticators to achieve a FAR of less than 1/10,000 to ensure strong user verification.

Question 5

Which attestation type allows a relying party to verify the authenticator model without the authenticator manufacturer being involved in each attestation?

Accepted Answer

Anonymization CA Attestation

Answer

Anonymization CA (AnonCA) attestation uses a CA that issues per-device certificates, allowing model verification while preserving privacy without per-transaction manufacturer involvement.

(FIDO) FIDO Certified Authenticator Practice Test

(FIDO) FIDO Certified Authenticator Practice Test

FIDO Professional Standards & Competencies 2