Domain framework
D02 · Authentication
Technologies and mechanisms used to verify identities.
Key knowledge areas
- Password Authentication
- Multi-Factor Authentication (MFA)
- Passwordless Authentication
- Passkeys
- FIDO2 and WebAuthn
- Windows Hello / Windows Hello for Business
- Smart Cards and PIV
- Certificate-Based Authentication
- Authentication Factors and Authenticators
- Authentication Assurance
- Authentication Recovery
Career alignment
- TRACK A — Identity Platform & CIAM Engineering: Core domain. View track
- TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track
Suggested learning outcomes
- Compare authenticator assurance and recovery risks.
- Explain FIDO2, WebAuthn, Windows Hello and smart cards.
These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.
Connected questions
Build competency evidence
Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.
Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.