FIDO Research Methods & Evidence-Based Practice 3

Question 1

A FIDO certification lab conducts conformance testing. Which principle ensures test results are reproducible by an independent lab?

Accepted Answer

Test transparency and documented methodology

Answer

Reproducibility requires transparent, documented methodologies so independent labs can replicate results under the same conditions.

Question 2

When evaluating a FIDO authenticator's resistance to side-channel attacks, which research methodology provides the strongest empirical evidence?

Accepted Answer

Controlled laboratory experiments measuring power consumption and timing

Answer

Controlled experiments measuring physical signals like power and timing provide direct empirical evidence of side-channel vulnerabilities.

Question 3

In FIDO security research, what is the primary purpose of a threat model developed before empirical testing begins?

Accepted Answer

To identify and scope the adversarial scenarios the study should evaluate

Answer

A threat model scopes the adversary capabilities and attack scenarios the research will empirically validate.

Question 4

A meta-analysis of FIDO phishing-resistance studies reports a pooled odds ratio of 0.02 compared to passwords. What does this finding mean?

Accepted Answer

FIDO users are 98% less likely to be successfully phished than password users

Answer

An odds ratio of 0.02 means FIDO users have dramatically reduced odds of phishing success—approximately 98% lower than password users.

Question 5

Which sampling method is most appropriate when researching FIDO adoption across heterogeneous enterprise sectors?

Accepted Answer

Stratified random sampling by industry sector

Answer

Stratified random sampling ensures proportional representation across industry sectors, supporting generalizable findings.

(FIDO) FIDO Certified Authenticator Practice Test