Identity Proofing and Verification Flashcards
7 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Identity Proofing and Verification flashcards as text
What is the role of a 'Trusted Referee' in NIST SP 800-63A identity proofing?
Answer: A trained individual who assists applicants unable to meet standard in-person proofing requirements
A Trusted Referee is a trained individual (such as a notary, medical professional, or agency representative) who can vouch for an applicant's identity when the applicant cannot complete standard proofing, enabling remote or assisted IAL3 proofing.
Which of the following best describes 'address of record' verification in identity proofing?
Answer: Confirming a physical or digital address associated with the applicant to establish contact and identity
Address of record verification confirms a physical or digital address tied to the individual, typically through enrollment codes sent by mail or verified credit bureau records, establishing a real-world connection.
What is 'enrollment code' delivery used for in remote identity proofing?
Answer: Confirming that the applicant has access to a verified address of record
An enrollment code (often delivered via postal mail or SMS to a verified phone number) confirms that the applicant controls the address of record associated with the claimed identity.
In identity proofing, 'evidence strength' as defined in NIST SP 800-63A primarily refers to:
Answer: The level of confidence that identity evidence is genuine and accurately identifies the individual
Evidence strength categorizes identity documents (Unacceptable, Weak, Fair, Strong, Superior) based on how reliably they establish uniqueness and are resistant to fraud, forgery, and misuse.
Which proofing method allows IAL3-equivalent remote identity proofing using a live video call with a trained operator?
Answer: Supervised remote proofing
Supervised remote proofing uses a live, real-time video session monitored by a trained operator who can examine documents, capture biometrics, and interact with the applicant to meet IAL3 requirements without physical presence.
What does 'identity validation' mean in the NIST SP 800-63A proofing process?
Answer: Confirming the applicant's claimed identity matches an authoritative source
Identity validation confirms that the evidence provided is genuine (not forged) and that the identity information on the evidence is accurate by checking it against authoritative sources such as government databases.
Which of the following represents the correct order of the three core phases in the NIST identity proofing process?
Answer: Resolution → Validation → Verification
NIST SP 800-63A defines the proofing process as: Resolution (identify a unique person) → Validation (confirm evidence is genuine) → Verification (confirm the applicant controls the identity), followed by binding.