ATP Technology & Digital Applications 3 — Questions and Answers
Question 1: Which protocol is most commonly used to securely transmit candidate authentication credentials between a testing platform and an identity provider?
- FTP
- SMTP
- SAML (Security Assertion Markup Language) (Correct answer)
- SNMP
Correct answer: SAML (Security Assertion Markup Language)
SAML is an open standard for exchanging authentication and authorization data between identity providers and service providers, widely used in testing platforms for single sign-on.
Question 2: What distinguishes 'record-and-review' remote proctoring from live online proctoring?
- Record-and-review uses AI to flag suspicious activity in real time
- A human proctor reviews the recorded session after the exam rather than watching live (Correct answer)
- Record-and-review requires a candidate to visit a test center
- It prevents the candidate from pausing the exam
Correct answer: A human proctor reviews the recorded session after the exam rather than watching live
In record-and-review proctoring, the session is recorded and later reviewed by a human or AI, whereas live proctoring involves real-time observation.
Question 3: In the context of digital assessment, what does API integration between an LMS and a testing platform typically enable?
- Automatic item difficulty calibration using IRT
- Seamless transfer of candidate enrollment data and score results between systems (Correct answer)
- Real-time webcam monitoring of candidates
- Conversion of paper-based items to digital format
Correct answer: Seamless transfer of candidate enrollment data and score results between systems
API integration allows an LMS and testing platform to exchange data such as candidate rosters, exam assignments, and score reports without manual data entry.
Question 4: Which type of item format is MOST challenging to score automatically in a digital testing environment?
- Multiple-choice
- True/false
- Drag-and-drop ordering
- Extended constructed-response (essay) (Correct answer)
Correct answer: Extended constructed-response (essay)
Extended constructed-response items require human raters or sophisticated AI scoring engines because they involve open-ended prose that resists simple pattern matching.
Question 5: What is the role of a 'checksum' in the secure delivery of digital test content?
- Measuring the file download speed
- Verifying that a file has not been altered or corrupted during transmission (Correct answer)
- Encrypting item content before it is stored in an item bank
- Tracking how many times an item has been administered
Correct answer: Verifying that a file has not been altered or corrupted during transmission
A checksum is a value computed from file data; comparing checksums before and after transmission confirms the content's integrity.
Question 6: When a testing platform uses 'token-based authentication,' what is the typical lifespan of an access token in a high-security exam environment?
- Permanent until manually revoked
- 30 days, matching the exam registration window
- Short-lived, often minutes to hours, to limit exposure if compromised (Correct answer)
- Exactly 24 hours to align with daily exam sessions
Correct answer: Short-lived, often minutes to hours, to limit exposure if compromised
Short-lived tokens minimize the window of opportunity for attackers if a token is intercepted, a key security principle in high-stakes testing environments.
Question 7: Which digital testing innovation allows candidates to take a subset of items from a large pool while still receiving statistically comparable scores?
- Fixed linear form testing
- Linear-on-the-fly testing (LOFT) (Correct answer)
- Paper-pencil parallel forms
- Oral examination delivery
Correct answer: Linear-on-the-fly testing (LOFT)
LOFT assembles a unique test form for each candidate on the fly from a large item pool, ensuring all forms meet the same statistical blueprint.
ATP Technology & Digital Applications 3
Which protocol is most commonly used to securely transmit candidate authentication credentials between a testing platform and an identity provider?