CBSE - Certified Blockchain Security Expert Enterprise Blockchain Security Questions and Answers 1 — Questions and Answers
Question 1: In a Hyperledger Fabric network, which component is primarily responsible for issuing and validating identities and defining the roles of participating members?
- The Orderer Service
- The Peer Node
- The Membership Service Provider (MSP) (Correct answer)
- The Chaincode
Correct answer: The Membership Service Provider (MSP)
The Membership Service Provider (MSP) is the core identity management component in Hyperledger Fabric. It is responsible for mapping cryptographic identities, like X.509 certificates, to roles and permissions within the network, thereby managing which participants are trusted and what actions they are authorized to perform.
Question 2: An enterprise consortium is building a supply chain solution on Hyperledger Fabric. They need to ensure that transactions related to pricing negotiations between a supplier and a retailer are kept confidential and are not visible to other members of the consortium, like logistics providers. Which Hyperledger Fabric feature is specifically designed to address this requirement for data isolation?
- Channels (Correct answer)
- Endorsement Policies
- Gossip Protocol
- Private Data Collections
Correct answer: Channels
Channels in Hyperledger Fabric create a private 'subnet' of communication between two or more specific network members. Each channel has its own separate ledger, meaning that only the members of that channel can see and transact on it, providing a powerful mechanism for confidentiality among subsets of participants.
Question 3: For a large-scale enterprise blockchain solution, what is considered the most secure industry-standard method for managing the private keys of critical identities, such as Certificate Authorities or Orderer nodes, to protect them from both software and physical threats?
- Storing keys in an encrypted file on the node's hard drive.
- Using a cloud-based Key Management Service (KMS).
- Embedding the keys directly in the application configuration files.
- Storing keys within a Hardware Security Module (HSM). (Correct answer)
Correct answer: Storing keys within a Hardware Security Module (HSM).
A Hardware Security Module (HSM) is a dedicated, tamper-resistant physical device designed for the secure management and storage of cryptographic keys. It ensures that private keys never leave the secure hardware boundary, offering the highest level of protection against both software-based attacks and physical tampering.
Question 4: Which of the following best describes the primary security function of an endorsement policy in Hyperledger Fabric?
- To encrypt transaction data before it is written to the ledger.
- To define the set of organizations that must execute and approve a transaction before it can be considered valid. (Correct answer)
- To manage the identities and certificates of all network participants.
- To order transactions into blocks to be delivered to peer nodes.
Correct answer: To define the set of organizations that must execute and approve a transaction before it can be considered valid.
An endorsement policy is a critical governance and security mechanism in Hyperledger Fabric. It is specified for a chaincode and dictates which peers (representing their organizations) must simulate and sign a transaction proposal. A transaction can only be committed to the ledger if it has collected the required set of signatures according to this policy, preventing unilateral actions and ensuring consensus among required parties.
Question 5: An enterprise wants to build a blockchain system to verify academic credentials. A university needs to issue a credential, and an employer needs to verify that a candidate has a valid degree without seeing the student's specific grades or other private details. Which cryptographic technique is best suited for this privacy-preserving verification?
- Zero-Knowledge Proofs (ZKPs) (Correct answer)
- Homomorphic Encryption
- Public Key Infrastructure (PKI)
- Secure Multi-Party Computation (SMPC)
Correct answer: Zero-Knowledge Proofs (ZKPs)
Zero-Knowledge Proofs (ZKPs) allow one party (the prover) to prove to another party (the verifier) that a statement is true, without revealing any information beyond the validity of the statement itself. This is ideal for credential verification, as the student (prover) can prove they have a valid degree to the employer (verifier) without disclosing the underlying private data like grades.
Question 6: A developer writes a Hyperledger Fabric chaincode function that uses the CouchDB state database. The function dynamically constructs a rich query string by concatenating user-provided input directly into the JSON query selector. A security audit flags this as a major vulnerability. What type of attack is this code susceptible to?
- Reentrancy Attack
- Cross-Site Scripting (XSS)
- Parameter Injection (Correct answer)
- Integer Underflow
Correct answer: Parameter Injection
The code is vulnerable to Parameter Injection (specifically, a CouchDB query injection). Because the user input is directly concatenated into the JSON query string, a malicious user could provide a crafted input to alter the query's logic, potentially accessing or manipulating data they are not authorized to see. This is analogous to SQL injection in traditional web applications.
CBSE - Certified Blockchain Security Expert Enterprise Blockchain Security Questions and Answers 1
In a Hyperledger Fabric network, which component is primarily responsible for issuing and validating identities and defining the roles of participating members?