AI w KYC i quizie weryfikującym tożsamość

Odpowiedzi i wyjaśnienia pojawiają się w miarę rozwiązywania quizu.

1. Czym KYC różni się od monitorowania transakcji?
   • KYC watches account activity for suspicious patterns, while transaction monitoring checks IDs
   • KYC establishes who a customer is at sign-up, while transaction monitoring watches account activity afterward
   • They are two names for the same process
   • KYC applies only to crypto, and transaction monitoring only to banks
2. Czym różni się atak polegający na wstrzyknięciu od ataku prezentacyjnego?
   • Injection attacks use printed photos held up to the camera
   • Injection attacks only target paper documents
   • Injection attacks require the fraudster to be physically present at a bank
   • Injection attacks skip the camera and feed pre-recorded or AI-generated video through virtual cameras, emulators or tampered devices
3. Co to jest pasywne wykrywanie aktywności?
   • Analyzing texture, depth cues and motion to detect spoofs without asking the user to do anything
   • Asking the user to blink, smile or turn their head
   • Having a human agent watch every sign-up live
   • Checking the user's device battery level
4. Dlaczego odczytanie chipa ePaszportu przez NFC jest mocniejszym dowodem niż zdjęcie strony z danymi?
   • The chip contains a video of the holder
   • NFC works without the passport being present
   • The chip data is cryptographically signed by the issuing country
   • Photos of passports are illegal to take
5. Co mierzy APCER w testach wykrywania ataków prezentacyjnych?
   • The share of real users wrongly rejected
   • The share of spoof attempts wrongly accepted
   • The speed of document scanning
   • The percentage of sign-ups completed on mobile
6. Why doesn't a strong selfie-to-document face match prove a person's identity by itself?
   • It does not prove the document is genuine or that the identity is not synthetic
   • Face matching only works on passports
   • Selfie matches are never used in KYC
   • Face matching models ignore the document photo
7. Why do providers need separate controls beyond ISO/IEC 30107-3 presentation attack testing?
   • The standard applies only to fingerprints
   • The standard bans liveness checks
   • The standard requires human review of every sign-up
   • The standard focuses on presentation attacks, so injection attacks need other defenses such as device attestation and virtual camera detection
8. What shift does the guide describe for the future of identity verification?
   • Replacing all digital checks with in-branch visits
   • Relying only on selfies with no documents
   • Moving from judging images toward verifying digital signatures on credentials such as mobile driver's licenses and digital identity wallets
   • Removing liveness detection entirely