nerdexam
(ISC)2

CISSP · Question #205

If an identification process using a biometric system detects a 100% match between a presented template and a stored template, what is the interpretation of this result?

The correct answer is B. Suspected tampering. In biometric systems, a 100% match between a presented template and a stored template is considered statistically impossible under normal conditions and is treated as an indicator of suspected tampering or system manipulation.

Submitted by anna_se· Mar 5, 2026Identity and Access Management

Question

If an identification process using a biometric system detects a 100% match between a presented template and a stored template, what is the interpretation of this result?

Options

  • AUser error
  • BSuspected tampering
  • CAccurate identification
  • DUnsuccessful identification

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    91% (48)
  • C
    6% (3)
  • D
    2% (1)

Why each option

In biometric systems, a 100% match between a presented template and a stored template is considered statistically impossible under normal conditions and is treated as an indicator of suspected tampering or system manipulation.

AUser error

User error would typically manifest as a failed match or low confidence score, not a perfect 100% match, which is physically implausible with legitimate biometric input.

BSuspected tamperingCorrect

Biometric systems are probabilistic by nature; no two scans of a biometric trait (fingerprint, iris, face) will ever produce a perfect 100% match due to environmental factors, sensor noise, and physiological variability. A 100% match score indicates that the template was not organically captured but was instead likely replayed, cloned, or artificially injected into the system, which is a hallmark of a spoofing or tampering attack.

CAccurate identification

Accurate identification in a legitimate biometric system produces a high-confidence match score that falls within an acceptable threshold range, never a perfect 100%, making this interpretation technically incorrect.

DUnsuccessful identification

Unsuccessful identification would result in a match score that falls below the system's acceptance threshold, not a suspiciously perfect 100% score.

Concept tested: Biometric system anomaly detection and spoofing indicators

Source: https://csrc.nist.gov/publications/detail/sp/800-76/2/final

Topics

#biometrics#identification#tampering detection

Community Discussion

No community discussion yet for this question.

Full CISSP Practice