ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Identity proofing focuses on validating that the person who is requesting an account is the legitimate subject of the claimed identity, typically by checking authoritative evidence (for example, a government-issued document) and binding it to the new digital identity. Integrating Amazon Cognito's pre-sign-up or post-confirmation Lambda triggers with a specialized third-party service that performs document verification and biometric liveness matching meets this goal: the workflow can call the external service, receive a pass/fail decision, and allow or deny account creation accordingly. Email confirmation, SMS one-time passwords, and social logins improve authentication strength or convenience but do not establish the applicant's real-world identity; they only prove control of an email address, phone number, or external credential. Therefore, only the integration that validates a government ID and matches it to the user through biometrics provides the required level of identity proofing.