IPA IP 2023 Question 99

A question IPA Japan published in 令和5年度 ITパスポート試験公開問題問99, translated into English. ITPEC is based on the same exams.

Same question on ITPEC: Oct 2024 Q35

Which of the following is the appropriate example of biometric authentication?

a)Displaying an image of characters that are difficult for a machine to read on a monitor, and having a person read the characters and enter themb)Having a person enter a password via a software keyboard that is displayed on a touch panelc)Reading the trail, pressure, and other characteristics of the action when a touch pen is used for a signatured)Having a person answer a question that only the person knows the answer to

Explanation

Reading the trail and pressure of a signature written with a touch pen — the question asks for authentication by a physical or behavioural trait of the person.

Biometric authentication identifies a person by what they are (fingerprint, face, iris, vein pattern) or how they behave. Dynamic signature verification is behavioural: it compares the stroke trail, writing speed and pen pressure, which are hard to imitate even if the shape of the signature is copied.

Answer (c)

Why not others:

•(a) — this is CAPTCHA, which checks that the user is a human rather than a program, not who the person is
•(b) — a password is knowledge; a software keyboard only guards against keyloggers
•(d) — a secret question is also knowledge, not a trait of the body

Key rule: Biometrics use something you are or do; passwords and secret questions are something you know; CAPTCHA only separates humans from bots.

Security · AI-written, may contain errors

Previous Next

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.