What does OMB M-04-04 E-authentication guidance provide guidance for?

• A. Encryption standards for federal communications
• B. E-authentication guidance for federal agencies
• C. PKI management guidelines
• D. Password policy requirements

Answer: (B)

The main idea this item tests is how electronic authentication for federal online access is governed. OMB M-04-04 provides guidance for federal agencies on establishing and using electronic authentication methods to verify identities when people access government systems and services. It sets up a risk-based framework that helps agencies decide how strong the authentication needs to be and which methods to use, based on the sensitivity of the data or action involved. It introduces levels of assurance to match the protection needs, covers identity proofing, credential management, and secure handling of credentials, and encourages the use of shared or federated authentication where appropriate.

This isn't about encryption standards for federal communications, nor is it a PKI management guide or a standalone password policy document. Instead, it focuses on how agencies should implement trustworthy electronic identity verification for online transactions.