CCI - Certified Cryptocurrency Investigator Bitcoin Transactions and Mining Questions and Answers — Questions and Answers
Question 1: An investigator is analyzing a Bitcoin transaction that has been broadcast to the network but has not yet been included in a block. In which of the following locations would the investigator most likely find this transaction?
- The mempool of a Bitcoin node (Correct answer)
- The victim's hardware wallet
- A centralized exchange's hot wallet
- The Bitcoin genesis block
Correct answer: The mempool of a Bitcoin node
When a Bitcoin transaction is broadcast, it enters a 'waiting area' called the mempool (memory pool) on Bitcoin nodes. Miners select transactions from the mempool to include in the next block. Therefore, an unconfirmed transaction resides in the mempool of the nodes on the network.
Question 2: A Certified Cryptocurrency Investigator is examining the rewards a miner received for successfully mining a new block. This reward is composed of two distinct components. Which of the following correctly identifies these two components?
- The block subsidy and a percentage of the network's total hash rate.
- A fixed amount of newly minted bitcoin and a discretionary bonus from the mining pool.
- The block subsidy (newly created bitcoin) and the transaction fees from the included transactions. (Correct answer)
- Transaction fees and a reward from the developers for securing the network.
Correct answer: The block subsidy (newly created bitcoin) and the transaction fees from the included transactions.
A miner's reward for successfully adding a new block to the Bitcoin blockchain consists of two parts: the block subsidy, which is a predetermined amount of newly created bitcoin, and the sum of all transaction fees from the transactions included in that block.
Question 3: An investigator is reviewing a series of transactions and notices that the fee paid for a $1 million transaction is the same as the fee for a $100 transaction. What is the primary factor that determines the cost of a Bitcoin transaction fee?
- The monetary value of the Bitcoin being sent.
- The transaction's data size in bytes and network congestion. (Correct answer)
- The reputation of the sending and receiving wallets.
- The number of confirmations the transaction has received.
Correct answer: The transaction's data size in bytes and network congestion.
Bitcoin transaction fees are not based on the monetary value being transferred. Instead, they are primarily determined by the transaction's size in terms of data (bytes or virtual bytes) and the current level of network congestion. Miners prioritize transactions with higher fees per byte, especially when block space is limited.
Question 4: A criminal organization attempts to disrupt the Bitcoin network by controlling over half of the network's mining power. They successfully reverse their own recent transactions, effectively spending the same bitcoins twice. What is this type of attack called?
- A Sybil Attack
- A Phishing Attack
- A 51% Attack (Correct answer)
- A Dusting Attack
Correct answer: A 51% Attack
A 51% attack occurs when a single entity or group controls more than 50% of a blockchain network's total mining hashrate. This majority control allows them to manipulate the blockchain, prevent new transactions from gaining confirmations, and reverse their own transactions, leading to double-spending.
Question 5: The Bitcoin protocol includes a mechanism to ensure that, on average, a new block is added to the blockchain approximately every 10 minutes, regardless of changes in the total network hash rate. What is this self-regulating feature called?
- The Halving
- The Difficulty Adjustment (Correct answer)
- Proof-of-Stake Consensus
- Segregated Witness (SegWit)
Correct answer: The Difficulty Adjustment
The Bitcoin network automatically adjusts the 'difficulty' of the mathematical problem miners must solve every 2,016 blocks (roughly every two weeks). If blocks are being found too quickly (faster than 10 minutes on average), the difficulty increases. If they are found too slowly, it decreases. This is known as the difficulty adjustment.
Question 6: Which of the following best describes an Unspent Transaction Output (UTXO) in the context of a Bitcoin investigation?
- A failed transaction that has been returned to the sender's wallet.
- A specific, discrete amount of bitcoin that has been received but not yet spent, acting as an input for a future transaction. (Correct answer)
- A type of cryptocurrency token used exclusively for paying transaction fees.
- A transaction that has been flagged as suspicious by a blockchain analytics tool.
Correct answer: A specific, discrete amount of bitcoin that has been received but not yet spent, acting as an input for a future transaction.
The UTXO model is fundamental to how Bitcoin tracks ownership. Instead of balances in an account, a user's wallet holds a collection of UTXOs. Each UTXO is a discrete amount of bitcoin from a previous transaction's output that the user can now spend. When a new transaction is made, existing UTXOs are used as inputs.
CCI - Certified Cryptocurrency Investigator Bitcoin Transactions and Mining Questions and Answers
An investigator is analyzing a Bitcoin transaction that has been broadcast to the network but has not yet been included in a block.
In which of the following locations would the investigator most likely find this transaction?