RFC 9334 Quiz

Q1: Which role creates Evidence about a Target Environment?

Multiple Choice

A. Attester B. Verifier C. Relying Party

**Explanation:** A: The Attester produces Evidence containing claims about its Target Environment. B: The Verifier consumes and appraises Evidence. C: The Relying Party consumes Attestation Results for its decision.

Q2: What is the Verifier's main output?

Multiple Choice

A. A new Target Environment B. An OAuth authorization code C. Attestation Results

**Explanation:** A: A role does not create the environment it is appraising. B: RATS does not define OAuth code issuance as the Verifier's output. C: The Verifier applies an Evidence appraisal policy and produces Attestation Results.

Q3: Who applies the Appraisal Policy for Attestation Results?

Multiple Choice

A. Attester B. Relying Party C. Endorser

**Explanation:** A: The Attester creates Evidence and does not make the Relying Party's acceptance decision. B: The Relying Party evaluates Attestation Results using its result-appraisal policy. C: An Endorser supplies Endorsements used by a Verifier.

Q4: Is a positive Attestation Result automatically an authorization grant?

Multiple Choice

A. Yes, the Verifier decides all resource access B. Yes, any signed result grants administrator rights C. No, the Relying Party still applies its own policy

**Explanation:** A: The Verifier appraises Evidence while the Relying Party makes its own decision. B: Signature validity does not define the Relying Party's authorization policy. C: An Attestation Result is decision support and can still be unacceptable for a particular use.

Q5: What distinguishes the Passport Model?

Multiple Choice

A. The Attester obtains an Attestation Result and presents it to a Relying Party B. The Relying Party sends Evidence to a Verifier and keeps the result private from the Attester C. No Verifier participates in the flow

**Explanation:** A: The reusable result resembles a passport carried by its holder. B: That flow describes the Background-Check Model more closely. C: Both topological patterns retain the Evidence-appraisal role of a Verifier.

Q6: What distinguishes the Background-Check Model?

Multiple Choice

A. The Attester always caches a reusable result before contacting any Relying Party B. The Relying Party receives Evidence and has a Verifier appraise it C. The Relying Party interprets raw Evidence without a Verifier

**Explanation:** A: That is characteristic of the Passport Model and is not required here. B: The result returns to the Relying Party for its own appraisal and decision. C: The architecture assigns Evidence appraisal to the Verifier role.

Q7: What is the role of Reference Values?

Multiple Choice

A. They are fresh nonces generated by the Attester B. They are the Relying Party's final access decision C. They are known comparison inputs for Evidence appraisal

**Explanation:** A: Nonces can support freshness but are not Reference Values. B: Reference Values are inputs to Evidence appraisal, not the final decision. C: They provide comparison material for assessing claims in Evidence.

Q8: Why does a RATS design evaluate freshness?

Multiple Choice

A. To limit replay of stale Evidence or Attestation Results B. To guarantee the device will remain trustworthy forever C. To replace authentication of the Evidence source

**Explanation:** A: Timestamps, nonces, or epoch identifiers can connect appraisal to a relevant time window. B: Freshness describes timing and cannot guarantee future state. C: Freshness and source authenticity are separate properties.

Q9: Which change addresses the disclosure risk without weakening appraisal?

Multiple Choice

An agent sends signed Evidence containing a device serial number, patch level, loaded modules, and a user identifier to any endpoint claiming to be the Verifier. The team argues that no Verifier authentication is needed because a recipient cannot alter the signature.

A. Keep the design because signature integrity also makes every recipient authorized B. Publish the Evidence broadly so all Verifiers receive an identical signed copy C. Authenticate the Verifier, minimize disclosed claims, and protect their confidentiality D. Remove freshness data because it is the only privacy-sensitive part of Evidence

**Explanation:** RFC 9334 Section 7.2 notes that an Attester typically authenticates a Verifier before releasing sensitive Evidence. Section 11 explains that Evidence and Attestation Results can reveal device state and PII. A signature protects authenticity and integrity, not recipient authorization or confidentiality. C preserves appraisal while controlling disclosure; B expands the exposure, and D neither addresses the listed data nor preserves freshness analysis.

Q10: May the backend authorize the requested transfer from this result alone?

Multiple Choice

A trusted Verifier issues a fresh, authentic Attestation Result saying that an agent runs approved firmware. A gateway treats that boolean result as permission for every operation. The backend receives the result and an otherwise valid OAuth grant whose audience names a different service; the requested transfer also exceeds the grant's scope.

A. Yes; approved firmware makes grant audience and scope checks redundant B. Yes; freshness turns an Attestation Result into an unrestricted authorization grant C. No; appraise the result, then independently enforce the operation's authorization policy D. No; a Relying Party is never allowed to use attestation in an authorization decision

**Explanation:** RFC 9334 Section 8.4 defines Attestation Results as input to a Relying Party's appraisal and application-specific decision. Section 10 makes freshness relevant to whether claims still reflect recent state, but freshness does not define resource authority. C preserves the separation: the result can satisfy a device-state condition, while audience, scope, subject, and operation policy still govern access. D is too broad because authorization is an explicit Relying Party use case.

Attestation roles, evidence, results, and freshness

References

Q1: Which role creates Evidence about a Target Environment?

Q2: What is the Verifier's main output?

Q3: Who applies the Appraisal Policy for Attestation Results?

Q4: Is a positive Attestation Result automatically an authorization grant?

Q5: What distinguishes the Passport Model?

Q6: What distinguishes the Background-Check Model?

Q7: What is the role of Reference Values?

Q8: Why does a RATS design evaluate freshness?

Q9: Which change addresses the disclosure risk without weakening appraisal?

Q10: May the backend authorize the requested transfer from this result alone?