CISSP · Question #205
If an identification process using a biometric system detects a 100% match between a presented template and a stored template, what is the interpretation of this result?
The correct answer is B. Suspected tampering. In biometric systems, a 100% match between a presented template and a stored template is considered statistically impossible under normal conditions and is treated as an indicator of suspected tampering or system manipulation.
Question
If an identification process using a biometric system detects a 100% match between a presented template and a stored template, what is the interpretation of this result?
Options
- AUser error
- BSuspected tampering
- CAccurate identification
- DUnsuccessful identification
How the community answered
(53 responses)- A2% (1)
- B91% (48)
- C6% (3)
- D2% (1)
Why each option
In biometric systems, a 100% match between a presented template and a stored template is considered statistically impossible under normal conditions and is treated as an indicator of suspected tampering or system manipulation.
User error would typically manifest as a failed match or low confidence score, not a perfect 100% match, which is physically implausible with legitimate biometric input.
Biometric systems are probabilistic by nature; no two scans of a biometric trait (fingerprint, iris, face) will ever produce a perfect 100% match due to environmental factors, sensor noise, and physiological variability. A 100% match score indicates that the template was not organically captured but was instead likely replayed, cloned, or artificially injected into the system, which is a hallmark of a spoofing or tampering attack.
Accurate identification in a legitimate biometric system produces a high-confidence match score that falls within an acceptable threshold range, never a perfect 100%, making this interpretation technically incorrect.
Unsuccessful identification would result in a match score that falls below the system's acceptance threshold, not a suspiciously perfect 100% score.
Concept tested: Biometric system anomaly detection and spoofing indicators
Source: https://csrc.nist.gov/publications/detail/sp/800-76/2/final
Topics
Community Discussion
No community discussion yet for this question.