Certified Blockchain Expert (CBE) — Questions and Answers

Question 1: The Bank Secrecy Act (BSA) requires US crypto businesses to implement which compliance program?

AML/KYC (Correct answer)
PCI-DSS
HIPAA
GDPR

Correct answer: AML/KYC

The BSA mandates Anti-Money Laundering (AML) and Know Your Customer (KYC) programs for money services businesses, including many crypto firms.

Question 2: What is 'sharding' as a blockchain scalability technique?

Dividing validator rewards into smaller increments
Breaking smart contracts into modular components
Splitting the blockchain into parallel partitions (shards) so each node only processes a subset of transactions (Correct answer)
Compressing block data to reduce storage requirements

Correct answer: Splitting the blockchain into parallel partitions (shards) so each node only processes a subset of transactions

Sharding horizontally partitions the blockchain so validator subsets process different transaction subsets in parallel, increasing overall throughput.

Question 3: What does FinCEN require of US-based cryptocurrency 'money services businesses' (MSBs)?

SEC registration as broker-dealers
Federal Reserve approval for all transactions
Registration with FinCEN and adherence to AML/CTF rules (Correct answer)
CFTC licensing as commodity pools

Correct answer: Registration with FinCEN and adherence to AML/CTF rules

FinCEN requires crypto MSBs to register, maintain AML programs, and file suspicious activity reports (SARs).

Question 4: Which of the following best defines a public blockchain?

Requires special hardware to access
Permissionless and open (Correct answer)
Owned by a central authority
Access limited to institutions

Correct answer: Permissionless and open

A public blockchain is characterized by being permissionless and open, meaning anyone can join the network, participate in validating transactions, and read the ledger without needing special authorization. This contrasts with private or consortium blockchains, which restrict access and participation. Bitcoin and Ethereum are prime examples of public blockchains.

Question 5: Which governance model uses a foundation or small committee to make protocol decisions, rather than broad token holder voting?

On-chain governance
Liquid democracy
Delegated governance
Off-chain governance (Correct answer)

Correct answer: Off-chain governance

Off-chain governance relies on informal processes—forums, foundations, or core teams—to reach consensus before implementing changes.

Question 6: What is gas in the context of smart contracts?

Execution fee (Correct answer)
Block size
Electricity cost
Mining reward

Correct answer: Execution fee

In the context of smart contracts, 'gas' refers to the execution fee required to perform operations on the Ethereum blockchain. It is a unit that measures the computational effort needed to execute transactions or smart contract functions. Users pay gas fees in Ether to compensate miners for the resources consumed in processing and validating these operations.

Question 7: Which privacy-enhancing cryptographic method allows a member of a group to sign a transaction on behalf of the group, making it computationally infeasible to determine which specific member's key was used for the signature?

Ring Signatures (Correct answer)
Sharding
Zero-Knowledge Proofs (ZKPs)
Stealth Addresses

Correct answer: Ring Signatures

Ring signatures provide anonymity by creating a digital signature where a transaction is signed by one member of a group ('ring') of possible signers. An observer can verify that the signature is valid and came from someone in the group, but they cannot identify the actual signer, providing plausible deniability.

Question 8: What is the primary function of a cryptographic hash function in a blockchain?

To execute the terms of a smart contract automatically.
To generate public and private keys for user wallets.
To provide a unique, fixed-size digital fingerprint for data, ensuring its integrity and linking blocks together. (Correct answer)
To reach an agreement among network participants on the validity of transactions.

Correct answer: To provide a unique, fixed-size digital fingerprint for data, ensuring its integrity and linking blocks together.

Cryptographic hash functions are fundamental to blockchain's security and immutability. They take an input of any size and produce a unique, fixed-length output (the hash). Any change to the input data results in a completely different hash, which is how data integrity is ensured. Hashes are also used to chain blocks together, creating a tamper-evident ledger.

Question 9: Which of the following statements best describes the concept of 'probabilistic finality' in the context of a Proof of Work (PoW) blockchain?

The network achieves absolute certainty of a transaction's immutability after a predetermined number of blocks.
Finality is guaranteed by a group of trusted validators who sign off on each block.
A transaction is considered final as soon as it is included in a block.
The likelihood of a transaction being reversed decreases as more blocks are added after it, but never reaches absolute certainty. (Correct answer)

Correct answer: The likelihood of a transaction being reversed decreases as more blocks are added after it, but never reaches absolute certainty.

In PoW systems like Bitcoin, finality is probabilistic. This means that the more blocks that are mined on top of the block containing a specific transaction, the more computationally difficult it becomes to alter that transaction. While the probability of a reversal becomes infinitesimally small after several confirmations (e.g., 6 for Bitcoin), it is never absolute.

Question 10: What is the primary function of a blockchain?

Cloud storage
Cryptographic wallet
Distributed ledger (Correct answer)
Data compression

Correct answer: Distributed ledger

A blockchain is fundamentally a type of distributed ledger technology (DLT). It is a decentralized, immutable, and cryptographically secured record of transactions that is shared and synchronized across a network of computers. This distributed nature eliminates the need for a central authority, enhancing transparency and security.

Question 11: A decentralized governance protocol allows token holders to vote on proposals. An attacker attempts to gain disproportionate influence by creating thousands of new, low-balance addresses and using them to vote for a malicious proposal. This attack is best described as a:

Sybil Attack (Correct answer)
Replay Attack
51% Attack
Dusting Attack

Correct answer: Sybil Attack

A Sybil attack is a security threat where a single entity creates a large number of pseudonymous identities (e.g., wallet addresses or nodes) to subvert a reputation or voting system. In decentralized governance, this allows one actor to appear as many, illegitimately amplifying their voting power to manipulate outcomes.

Question 12: Which protocol is specifically designed for cross-chain messaging and asset transfers using a hub-and-spoke model?

Hyperledger Fabric channels
Cosmos IBC (Inter-Blockchain Communication) (Correct answer)
Polkadot XCM only
Ethereum Bridge Protocol

Correct answer: Cosmos IBC (Inter-Blockchain Communication)

The IBC protocol in the Cosmos ecosystem enables sovereign blockchains to communicate and transfer assets through standardized message passing via a central hub.

Question 13: In Polkadot's architecture, what role does the Relay Chain play?

It hosts all smart contracts for the Polkadot ecosystem
It stores all parachain transaction data on-chain
It provides shared security and consensus for all connected parachains (Correct answer)
It acts as a bridge exclusively to the Ethereum mainnet

Correct answer: It provides shared security and consensus for all connected parachains

Polkadot's Relay Chain is the central chain that coordinates consensus and security, while parachains handle application-specific logic and connect via slots.

Question 14: Which of the following describes the most significant economic disincentive for a rational actor to attempt a 51% attack on a major, well-established Proof-of-Work blockchain like Bitcoin?

The immense capital cost to acquire and operate the necessary hash power, and the resulting collapse in the coin's value, which would devalue any stolen assets. (Correct answer)
The social backlash from the cryptocurrency community on social media platforms.
The protocol's automatic rejection of any blocks mined by a single entity controlling over 50% of the network.
The guarantee of criminal prosecution and lengthy jail time.

Correct answer: The immense capital cost to acquire and operate the necessary hash power, and the resulting collapse in the coin's value, which would devalue any stolen assets.

A 51% attack requires an attacker to control a majority of the network's hash rate. For a large network like Bitcoin, the cost of acquiring and powering that much specialized hardware (ASICs) is enormous. Furthermore, a successful attack would undermine trust in the network's security, causing the cryptocurrency's price to plummet. This would devalue any assets the attacker might gain through double-spending, making the attack economically irrational for a profit-motivated actor.

Question 15: What characteristic makes algorithmic stablecoins different from collateral-backed stablecoins?

Algorithmic stablecoins cannot interact with DeFi lending protocols
Algorithmic stablecoins use smart contract supply-adjustment mechanisms to maintain their peg without holding equivalent reserves (Correct answer)
Algorithmic stablecoins are issued and controlled by central banks
Algorithmic stablecoins are always pegged to gold rather than fiat currency

Correct answer: Algorithmic stablecoins use smart contract supply-adjustment mechanisms to maintain their peg without holding equivalent reserves

Algorithmic stablecoins maintain their price peg through automated supply expansion and contraction via smart contracts rather than holding equivalent collateral in reserve.

Question 16: A development team is building a decentralized application (DApp) for supply chain management. The DApp needs to automatically trigger a payment to a supplier once a shipment's arrival is confirmed by an external logistics provider's API. What component is essential for the smart contract to securely interact with this off-chain data?

A decentralized file storage system like IPFS.
The Ethereum Virtual Machine (EVM).
A blockchain oracle. (Correct answer)
An integrated development environment (IDE) like Remix.

Correct answer: A blockchain oracle.

Smart contracts on a blockchain cannot directly access real-world, off-chain data. A blockchain oracle is a service that acts as a bridge, fetching and verifying external information (like an API response) and feeding it to the smart contract to trigger its execution.

Question 17: In a public-key cryptography system as used in blockchain, what is the relationship between the private key and the public key?

The public key is mathematically derived from the private key, but it is computationally infeasible to reverse the process. (Correct answer)
Both keys are identical and shared between the sender and receiver for secure communication.
The private key is derived from the public key.
The public key is used to encrypt data, and the private key is used to decrypt it.

Correct answer: The public key is mathematically derived from the private key, but it is computationally infeasible to reverse the process.

In asymmetric cryptography (public-key cryptography), the public key is generated from the private key through a one-way mathematical function, typically using elliptic curve multiplication in blockchains. While it is easy to generate the public key from the private key, it is computationally infeasible to derive the private key from the public key, which is fundamental to the security of the system.

Question 18: In the context of blockchain platforms, the term 'permissionless' primarily implies that:

anyone can join the network, participate in consensus, and view the ledger without needing approval. (Correct answer)
all transactions are anonymous and cannot be traced.
the network is controlled by a single entity that grants permissions.
developers do not need permission from a central body to build applications on the platform.

Correct answer: anyone can join the network, participate in consensus, and view the ledger without needing approval.

'Permissionless' directly refers to the lack of a gatekeeper for participating in the network's core functions. On a public, permissionless blockchain, any individual can connect a node, view the public ledger, submit transactions, and attempt to participate in the consensus mechanism without seeking approval from a central authority.

Question 19: How is the market capitalization of a cryptocurrency correctly calculated?

Total value locked in the protocol's smart contracts
Maximum supply multiplied by the initial offering price
Total supply multiplied by the token's all-time high price
Circulating supply multiplied by the current market price (Correct answer)

Correct answer: Circulating supply multiplied by the current market price

Market capitalization equals circulating supply multiplied by the current market price, reflecting the aggregate market value of all tokens currently available for trading.

Question 20: Which interoperability approach uses 'light clients' to verify cross-chain transactions without trusting a centralized bridge?

IBC's on-chain light client verification, where each chain runs a light client of the other (Correct answer)
Wrapped token bridges backed by audited smart contracts
Centralized custodian holding assets on behalf of both chains
Multisig bridge relayers where 5-of-9 signers approve transfers

Correct answer: IBC's on-chain light client verification, where each chain runs a light client of the other

IBC's trust model requires each chain to maintain an on-chain light client of the counterparty, verifying block headers cryptographically rather than trusting human validators.

Question 21: Which component of a blockchain contains the hash of the previous block?

Nonce
Footer
Header (Correct answer)
Genesis block

Correct answer: Header

Each block in a blockchain contains a header, which holds crucial metadata about the block. This metadata includes the hash of the previous block, a timestamp, the Merkle root of the transactions within the current block, and a nonce. The inclusion of the previous block's hash creates a cryptographic link, forming the 'chain' and ensuring data integrity.

Question 22: Which Layer 2 scaling solution bundles hundreds of transactions off-chain and submits a single proof to the main chain?

Sharding
Lightning Network
Plasma
ZK-Rollup (Correct answer)

Correct answer: ZK-Rollup

ZK-Rollups aggregate transactions off-chain and generate a zero-knowledge proof of validity, posting only the proof and compressed data to Ethereum mainnet.

Question 23: A developer is building a new blockchain protocol and needs to select a hashing algorithm. Which of the following is a critical property for the chosen algorithm to prevent attackers from finding two different inputs that produce the same hash output?

Pre-image resistance
Fixed output size
Collision resistance (Correct answer)
Deterministic nature

Correct answer: Collision resistance

Collision resistance is a crucial property of a cryptographic hash function, meaning it should be computationally infeasible to find two different inputs that produce the exact same hash output. If a hash function is not collision-resistant, an attacker could create a fraudulent transaction that has the same hash as a legitimate one, compromising the integrity of the blockchain.

Question 24: As the block subsidy in a cryptocurrency like Bitcoin diminishes over time due to halvings, what is expected to become the primary source of revenue for miners to incentivize them to continue securing the network?

Increased cryptocurrency value alone.
Revenue from selling mining hardware.
Transaction fees paid by users. (Correct answer)
Donations from the user community.

Correct answer: Transaction fees paid by users.

The block subsidy is designed to decrease over time, eventually reaching zero. The long-term security model relies on transaction fees becoming the primary incentive for miners. As users compete for limited space in each block, they include fees to have their transactions processed. Miners collect these fees as part of the block reward, and this revenue is intended to replace the diminishing subsidy.

Question 25: What is a Hash Time-Locked Contract (HTLC) primarily used for?

Encrypting validator communications in a PoS network
Enabling trustless cross-chain atomic swaps by combining hash locks and time locks (Correct answer)
Securing smart contract code from reentrancy attacks
Compressing transaction data for rollup submissions

Correct answer: Enabling trustless cross-chain atomic swaps by combining hash locks and time locks

HTLCs use a cryptographic hash lock (reveal preimage to claim) and time lock (refund if unclaimed) to enable atomic swaps without a trusted intermediary.

Question 26: When deploying a smart contract to the Ethereum network, what is the primary purpose of 'gas'?

To pay for the computational effort required to execute operations and record transactions on the blockchain. (Correct answer)
A token used for governance votes within the DApp.
A fixed fee paid to the developers of the Solidity language.
A unit of data storage for the smart contract's variables.

Correct answer: To pay for the computational effort required to execute operations and record transactions on the blockchain.

Gas is the unit used to measure the computational work required to perform operations on the Ethereum network. Users pay gas fees in Ether (ETH) to compensate miners or validators for the resources consumed to execute transactions and smart contract interactions, preventing spam and allocating resources on the decentralized network.

Question 27: What is yield farming in decentralized finance?

Creating NFTs to represent agricultural land and commodity ownership
Generating returns by strategically providing liquidity or staking assets across multiple DeFi protocols (Correct answer)
The process of mining new tokens through proof-of-work computational effort
A method for validators to earn block rewards in proof-of-stake networks

Correct answer: Generating returns by strategically providing liquidity or staking assets across multiple DeFi protocols

Yield farming involves strategically deploying crypto assets across DeFi protocols—liquidity pools, lending markets, and staking contracts—to earn compounded returns through fees, interest, and token incentives.

Question 28: A global shipping company wants to create a blockchain for internal tracking of its containers. The primary requirements are high transaction throughput, strict access control for its employees only, and confidentiality of shipping manifests. Which type of blockchain platform is most suitable?

Hybrid Blockchain
Consortium Blockchain
Private Blockchain (Correct answer)
Public Blockchain

Correct answer: Private Blockchain

A private blockchain is ideal because it is controlled by a single entity, allowing for maximum control over permissions, privacy, and performance. Since all participants are known and trusted, consensus can be achieved much faster, leading to high throughput. Public access is not required, and governance is not shared among multiple companies.

Question 29: Which cross-chain standard does Polkadot use for message passing between parachains?

IBC (Inter-Blockchain Communication)
XCM (Cross-Consensus Message Format) (Correct answer)
HTLC (Hash Time-Locked Contracts)
ABI (Application Binary Interface)

Correct answer: XCM (Cross-Consensus Message Format)

XCM is Polkadot's language for expressing intent for cross-chain operations, enabling assets and messages to move between parachains and external networks.

Question 30: What is 'quadratic voting' designed to address in blockchain governance?

Preventing Sybil attacks by requiring voters to stake tokens
Ensuring all votes are processed within one block
Speeding up the voting process by limiting each voter to two choices
The outsized influence of large token holders by making additional votes progressively costlier (Correct answer)

Correct answer: The outsized influence of large token holders by making additional votes progressively costlier

Quadratic voting charges token holders exponentially more for each additional vote, giving smaller holders relatively more influence than in simple token-weighted voting.

Question 31: What is the Lightning Network's approach to scaling Bitcoin transactions?

Payment channels that allow off-chain bilateral transactions settled on-chain only when channels close (Correct answer)
Moving Bitcoin transactions to a Proof of Stake sidechain
Increasing Bitcoin's block size to 4MB
Using ZK-proofs to batch Bitcoin transactions

Correct answer: Payment channels that allow off-chain bilateral transactions settled on-chain only when channels close

The Lightning Network creates peer-to-peer payment channels where parties transact off-chain; only the opening and closing transactions are recorded on the Bitcoin blockchain.

Question 32: Which type of DAO structure gives voting weight proportional to the number of governance tokens held?

Quadratic voting
Token-weighted voting (Correct answer)
One-person-one-vote
Reputation-based voting

Correct answer: Token-weighted voting

Token-weighted voting means larger token holders have proportionally more influence, which is common but criticized for plutocratic tendencies.

Question 33: A developer is writing a Solidity smart contract that handles user withdrawals. They write the code to send the Ether to the user's address before updating the user's balance in the contract's state. This sequence of operations makes the contract vulnerable to which specific type of attack?

Integer Overflow
Denial of Service (DoS)
Timestamp Dependence
Reentrancy (Correct answer)

Correct answer: Reentrancy

A reentrancy attack occurs when an external call is made to another contract before the original function has finished its execution, particularly before updating its state. A malicious contract can exploit this by repeatedly calling the withdraw function, re-entering the code before the balance is updated, and draining funds.

Question 34: What is a node in the context of blockchain?

Network participant (Correct answer)
Data block
Smart contract
Mining equipment

Correct answer: Network participant

In the context of blockchain, a node is any computer or device participating in the blockchain network. Nodes store a copy of the blockchain ledger, validate transactions, and contribute to maintaining the network's integrity and security. They act as the distributed backbone of the blockchain.

Question 35: An analyst observes that a user's cryptocurrency wallet has received multiple, unsolicited, extremely small transactions from various unknown addresses. What type of attack is this user MOST likely experiencing, which aims to de-anonymize the wallet owner by linking their addresses together?

A Dusting Attack (Correct answer)
A Sybil Attack
A Phishing Attack
An Eclipse Attack

Correct answer: A Dusting Attack

A dusting attack is a privacy attack where malicious actors send tiny amounts of cryptocurrency (dust) to numerous wallet addresses. Their goal is to track the transactional activity of these wallets to de-anonymize the owner by linking different addresses to a single entity.

Question 36: What is the fundamental role of the backend in a typical Decentralized Application (DApp) architecture?

To store large files and user data in a traditional SQL database.
To handle user authentication through a centralized identity provider.
To host the user interface and frontend code on a centralized server.
To run on a decentralized peer-to-peer network, typically consisting of smart contracts. (Correct answer)

Correct answer: To run on a decentralized peer-to-peer network, typically consisting of smart contracts.

The defining characteristic of a DApp is that its backend logic runs on a decentralized network, not a central server. This backend is primarily composed of smart contracts that execute on the blockchain, ensuring the application is censorship-resistant and operates in a trustless manner.

Question 37: What does the CFTC regulate in the cryptocurrency space?

Stablecoin reserves and audits
All cryptocurrency spot markets and ICOs
Crypto derivatives and futures contracts, classifying Bitcoin and Ether as commodities (Correct answer)
Central bank digital currencies (CBDCs)

Correct answer: Crypto derivatives and futures contracts, classifying Bitcoin and Ether as commodities

The CFTC has jurisdiction over crypto derivatives markets and has designated Bitcoin and Ether as commodities under the Commodity Exchange Act.

Question 38: What is the primary purpose of on-chain governance in a blockchain network?

To enforce KYC requirements automatically
To allow token holders to vote on protocol upgrades directly via the blockchain (Correct answer)
To enable miners to approve all transactions
To let developers push updates without community input

Correct answer: To allow token holders to vote on protocol upgrades directly via the blockchain

On-chain governance lets token holders submit and vote on proposals—such as protocol upgrades—with results enforced automatically by the network.

Question 39: What distinguishes an Optimistic Rollup from a ZK-Rollup?

Optimistic Rollups are only used on Bitcoin while ZK-Rollups are Ethereum-specific
Optimistic Rollups use zero-knowledge proofs while ZK-Rollups use fraud proofs
Optimistic Rollups assume transactions are valid and use a fraud-proof challenge window instead of validity proofs (Correct answer)
Optimistic Rollups process transactions on-chain while ZK-Rollups are fully off-chain

Correct answer: Optimistic Rollups assume transactions are valid and use a fraud-proof challenge window instead of validity proofs

Optimistic Rollups post transactions assuming validity; a 7-day challenge window allows anyone to submit a fraud proof if a transaction is invalid.

Question 40: What is a 'wrapped token' in blockchain ecosystems?

A token that has been encrypted using zero-knowledge proofs for privacy
A tokenized representation of another cryptocurrency, pegged 1:1 to the original, enabling cross-chain use (Correct answer)
A stablecoin backed by fiat currency held in a regulated custodial account
A token distributed through a community airdrop campaign to existing holders

Correct answer: A tokenized representation of another cryptocurrency, pegged 1:1 to the original, enabling cross-chain use

A wrapped token (e.g., Wrapped Bitcoin/WBTC) is a tokenized representation of another cryptocurrency locked in a custodian, pegged 1:1 to the original asset, allowing it to function on a different blockchain network.

Question 41: What is 'data availability' and why is it critical for Layer 2 rollup security?

The bandwidth available to process transactions on the L2 network
The replication of L2 node data across geographically distributed servers
The encryption scheme used to protect private transaction data on rollups
The guarantee that transaction data posted to L1 is publicly accessible so anyone can reconstruct the L2 state and detect fraud (Correct answer)

Correct answer: The guarantee that transaction data posted to L1 is publicly accessible so anyone can reconstruct the L2 state and detect fraud

If rollup transaction data is unavailable, users cannot verify or challenge the L2 state, so rollups post data to Ethereum mainnet to ensure public auditability.

Question 42: A startup holds a significant amount of its treasury in cryptocurrency. To prevent a single point of failure and protect against internal theft, they need a solution that requires approval from multiple executives before any funds can be moved. Which security mechanism is MOST effective for this requirement?

A multi-signature (multi-sig) wallet (Correct answer)
A time-locked smart contract
A hierarchical deterministic (HD) wallet
A cold storage paper wallet

Correct answer: A multi-signature (multi-sig) wallet

A multi-signature (multi-sig) wallet is ideal for corporate treasury management as it requires M-of-N signatures to approve a transaction. This distributes control, preventing any single person from unilaterally moving funds and thus protecting against both external hacks and internal threats.

Question 43: What is the Travel Rule requirement as applied to cryptocurrency transactions in the US?

Exchanges must block international transfers above $10,000
Miners must verify identities before adding transactions to blocks
All crypto transactions must be reported to the IRS regardless of amount
VASPs must share sender and recipient identifying information for transfers above $3,000 (Correct answer)

Correct answer: VASPs must share sender and recipient identifying information for transfers above $3,000

FinCEN's Travel Rule requires Virtual Asset Service Providers (VASPs) to transmit identifying information on transfers of $3,000 or more.

Question 44: Elliptic Curve Cryptography (ECC) is widely used in blockchains like Bitcoin and Ethereum. What is its primary advantage over older algorithms like RSA?

It provides the same level of security with smaller key sizes. (Correct answer)
It is a simpler algorithm to implement.
It is resistant to quantum computing attacks.
It uses symmetric keys for faster encryption.

Correct answer: It provides the same level of security with smaller key sizes.

The main advantage of Elliptic Curve Cryptography (ECC) is that it can provide the same level of security as algorithms like RSA but with significantly smaller key sizes. This leads to lower computational overhead, faster operations, and reduced storage and bandwidth requirements, which are crucial for the efficiency and scalability of a blockchain network.

Question 45: When comparing the vulnerability to a 51% attack, what is the fundamental difference between Proof of Work (PoW) and Proof of Stake (PoS) blockchains?

PoS is immune to 51% attacks, while PoW is not.
Both mechanisms require 51% of the total nodes to be controlled by an attacker.
In PoW, an attacker needs 51% of the total cryptocurrency, while in PoS, an attacker needs 51% of the network's hash rate.
In PoW, an attacker needs 51% of the network's hash rate, while in PoS, an attacker needs 51% of the total staked cryptocurrency. (Correct answer)

Correct answer: In PoW, an attacker needs 51% of the network's hash rate, while in PoS, an attacker needs 51% of the total staked cryptocurrency.

The resource required to conduct a 51% attack differs fundamentally between PoW and PoS. In a PoW system, an attacker must control more than 50% of the network's total computational (hashing) power. In a PoS system, an attacker must acquire and stake more than 50% of the network's native cryptocurrency. This shifts the security model from computational dominance to economic dominance.

Question 46: Which cryptographic principle is primarily responsible for ensuring the integrity and immutability of data within a blockchain by creating a unique, fixed-size output from variable-sized transaction data?

Public Key Infrastructure (PKI)
Digital Signatures
Symmetric Encryption
Hashing (Correct answer)

Correct answer: Hashing

Hashing is a one-way cryptographic function that takes an input of any size and produces a fixed-size string of characters, known as a hash. In blockchain, any small change to the input data (like a transaction detail) will result in a completely different hash. This property makes it easy to detect tampering and ensures the integrity of the data stored in each block, linking them together in a secure chain.

Question 47: A consortium of financial institutions is building a private blockchain for inter-bank settlements. The key requirements are high transaction throughput, low latency, and deterministic finality, meaning once a transaction is confirmed, it is irreversible. The number of participating nodes is known and relatively small. Which consensus mechanism is most appropriate for this scenario?

Delegated Proof of Stake (DPoS)
Practical Byzantine Fault Tolerance (PBFT) (Correct answer)
Proof of Work (PoW)
Proof of Stake (PoS)

Correct answer: Practical Byzantine Fault Tolerance (PBFT)

Practical Byzantine Fault Tolerance (PBFT) is well-suited for permissioned or private blockchain networks where the participants are known. It provides high throughput, low latency, and, crucially, deterministic (or instant) finality, meaning a transaction cannot be reverted once agreed upon by the required number of nodes. This is ideal for financial settlement systems where certainty is paramount. PBFT is efficient with a smaller number of nodes, fitting the consortium model.

Question 48: What is the best practice for monitoring system architecture systems?

Rely on vendor notifications exclusively
Check systems manually once a month
Monitor only when users report problems
Implement automated monitoring with alerting thresholds (Correct answer)

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 49: What is a smart contract in blockchain technology?

Blockchain explorer
Legal contract with digital signature
Decentralized API
Self-executing program (Correct answer)

Correct answer: Self-executing program

A smart contract is a self-executing program stored directly on a blockchain. It automatically executes predefined actions and terms of an agreement when specific conditions are met, without the need for intermediaries. This ensures transparency, immutability, and trustless execution of agreements.

Question 50: Which of the following is a drawback of Proof of Work?

Inability to scale
Low security
Low latency
High energy consumption (Correct answer)

Correct answer: High energy consumption

A significant drawback of Proof of Work (PoW) consensus mechanisms, as used by Bitcoin, is their high energy consumption. Miners expend vast amounts of computational power to solve cryptographic puzzles, leading to substantial electricity usage and environmental concerns. This energy expenditure is necessary to secure the network but comes at a considerable cost.

Question 51: Which blockchain platform is widely known for supporting smart contracts?

Dogecoin
Ethereum (Correct answer)
Bitcoin
Ripple

Correct answer: Ethereum

Ethereum is renowned for pioneering and widely supporting smart contract functionality. Unlike Bitcoin, which primarily focuses on peer-to-peer digital cash, Ethereum was designed as a platform for building decentralized applications (dApps) and executing complex, self-executing agreements through its smart contracts.

Question 52: Which US regulatory body primarily oversees cryptocurrency exchanges and classifies many tokens as securities?

OCC
SEC (Correct answer)
FinCEN
CFTC

Correct answer: SEC

The SEC (Securities and Exchange Commission) applies the Howey Test to determine if tokens are securities and regulates exchanges accordingly.

Question 53: Which of the following network-level attacks on a blockchain node involves isolating it from the rest of the honest network and connecting it exclusively to attacker-controlled nodes, potentially leading to double-spending or selfish mining?

Eclipse Attack (Correct answer)
Routing Attack
Man-in-the-Middle Attack
Sybil Attack

Correct answer: Eclipse Attack

An eclipse attack is a network-level attack where an adversary monopolizes all of a victim node's connections, isolating it from legitimate peers. This allows the attacker to feed the node false information about the blockchain's state, which can be exploited for double-spending or to disrupt consensus.

Question 54: Which of the following is the MOST accurate description of decentralization in the context of blockchain technology?

A type of database where information is stored in a central location but can be accessed by multiple users.
The process of encrypting data to ensure that only authorized parties can access it.
A system where control and decision-making are distributed across a network of participants rather than being held by a central authority. (Correct answer)
A single server that manages and validates all transactions for enhanced speed.

Correct answer: A system where control and decision-making are distributed across a network of participants rather than being held by a central authority.

Decentralization is a core principle of blockchain. It means that there is no single point of control or failure; instead, authority and network maintenance are distributed among many participants (nodes). This structure enhances security, transparency, and resistance to censorship.

Question 55: What is 'token burning' in blockchain tokenomics?

The process of creating new tokens through mining
Converting tokens into stablecoins to preserve value
Permanently removing tokens from circulation by sending them to an unspendable address (Correct answer)
Transferring tokens to a locked staking contract for rewards

Correct answer: Permanently removing tokens from circulation by sending them to an unspendable address

Token burning permanently removes tokens from circulation by sending them to an unspendable 'burn address,' reducing total supply and creating potential deflationary pressure.

Question 56: In DeFi, what does 'Total Value Locked' (TVL) measure?

The aggregate dollar value of all crypto assets deposited in a DeFi protocol's smart contracts (Correct answer)
The cumulative trading volume executed on a decentralized exchange
The total number of unique transactions processed by a protocol per day
The maximum token supply that the protocol can ever mint

Correct answer: The aggregate dollar value of all crypto assets deposited in a DeFi protocol's smart contracts

TVL measures the aggregate dollar value of all cryptocurrency assets deposited and locked in a DeFi protocol's smart contracts, serving as a primary indicator of protocol adoption and trust.

Question 57: What is the primary purpose of a blockchain bridge?

To merge two blockchains into one unified ledger
To transfer assets or data between two separate blockchain networks (Correct answer)
To synchronize node clocks across a network
To increase block size on a single chain

Correct answer: To transfer assets or data between two separate blockchain networks

A blockchain bridge locks assets on the source chain and mints equivalent wrapped tokens on the destination chain, enabling cross-chain transfers.

Question 58: A new blockchain project is promoting its Proof-of-Stake (PoS) consensus mechanism as being more economically efficient than Proof-of-Work (PoW). What is the primary reason for this claim?

PoS eliminates the need for high energy consumption and specialized, expensive mining hardware. (Correct answer)
PoS blockchains are inherently more decentralized than PoW blockchains.
PoS validators earn significantly higher rewards than PoW miners.
PoS networks can process a higher volume of transactions per second.

Correct answer: PoS eliminates the need for high energy consumption and specialized, expensive mining hardware.

Proof-of-Work relies on miners expending vast amounts of computational power and electricity to compete to solve a puzzle. In contrast, Proof-of-Stake selects validators to create new blocks based on the number of coins they have 'staked' as collateral. This removes the energy-intensive computational race, drastically reducing electricity costs and eliminating the need for ever-more-powerful specialized hardware (ASICs), making it more economically and environmentally efficient.

Question 59: What is the key security risk of a 'trusted' or 'custodial' cross-chain bridge?

Trusted bridges cannot support ERC-20 tokens, only native assets
Bridges slow down transaction finality on both connected chains
Custodial bridges require on-chain governance votes for every transfer
A compromised custodian or multisig can steal all locked assets, making bridges high-value hack targets (Correct answer)

Correct answer: A compromised custodian or multisig can steal all locked assets, making bridges high-value hack targets

Custodial bridges (e.g., early Ronin Bridge) concentrate risk in a multisig or custodian; the $625M Ronin hack exploited compromised validator keys controlling the bridge.

Question 60: A financial consortium wants to create a blockchain for inter-bank transfers. They require high transaction speeds, control over who can participate, and data privacy. Which type of blockchain would be most suitable for this scenario?

Consortium Blockchain (Correct answer)
Public Blockchain
Hybrid Blockchain
Private Blockchain

Correct answer: Consortium Blockchain

A consortium blockchain is a semi-decentralized type of blockchain that is governed by a group of organizations rather than a single entity. It is ideal for business collaborations where trust, privacy, and control are essential among a known group of participants, fitting the needs of a financial consortium perfectly. While a private blockchain is controlled by one entity, a consortium model shares control among members.

Question 61: A user wants to authorize a cryptocurrency transaction on a blockchain network. Which of the following cryptographic tools allows the user to prove ownership of the funds and authorize the transfer without revealing their secret key?

Digital Signature (Correct answer)
Merkle Root
Proof of Work
Cryptographic Nonce

Correct answer: Digital Signature

A digital signature is created using the sender's private key and the transaction data. Others on the network can then use the sender's public key to verify that the signature is authentic and that the transaction has not been altered, thus proving ownership and authorizing the transaction without exposing the private key.

Question 62: A financial DApp allows users to lend and borrow assets. The interest rates for these loans must be adjusted based on real-world market data. Which of the following is NOT a primary component needed to build this DApp?

Smart contracts to manage the logic of lending and borrowing.
A centralized server to store all transaction history for faster queries. (Correct answer)
A frontend user interface for users to interact with the application.
An oracle to feed real-time asset prices into the smart contracts.

Correct answer: A centralized server to store all transaction history for faster queries.

A core principle of a DApp is decentralization. While some off-chain storage might be used, storing all transaction history on a centralized server would create a single point of failure and defeat the purpose of using a blockchain. The transaction history is immutably stored on the blockchain itself.

Question 63: What is an Initial DEX Offering (IDO) and how does it differ from an ICO?

An IDO is a government-sanctioned cryptocurrency token auction requiring regulatory approval
An IDO is a token launch conducted on a decentralized exchange providing immediate on-chain liquidity, unlike ICOs which use centralized platforms (Correct answer)
An IDO is a centralized exchange's formal listing announcement process for a newly approved token
An IDO is the distribution of genesis block tokens to early blockchain miners at network launch

Correct answer: An IDO is a token launch conducted on a decentralized exchange providing immediate on-chain liquidity, unlike ICOs which use centralized platforms

An IDO launches tokens directly on a decentralized exchange, providing immediate trading liquidity from day one and eliminating centralized intermediaries, unlike ICOs which rely on centralized platforms and may have delayed exchange listings.

Question 64: What is the fundamental principle behind system architecture in the context of Certified Blockchain Expert?

Maximizing system complexity
Avoiding all system changes
Ensuring reliability, security, and optimal performance (Correct answer)
Using the most expensive solutions available

Correct answer: Ensuring reliability, security, and optimal performance

System Architecture in Certified Blockchain Expert fundamentally aims to ensure system reliability, security, and optimal performance.

Question 65: What is a liquidity pool in the context of decentralized exchanges (DEXs)?

A smart contract holding paired token reserves that enables automated trading without traditional order books (Correct answer)
A governance mechanism allowing token holders to vote on exchange fee parameters
A consortium of validators who collectively prioritize and process transaction ordering
A cold storage multi-signature system for securing a DEX's treasury assets

Correct answer: A smart contract holding paired token reserves that enables automated trading without traditional order books

Liquidity pools are smart contracts containing reserves of paired tokens that enable automated market makers (AMMs) to quote prices and execute trades without requiring a matching buyer and seller.

Question 66: What is a 'wrapped token' in the context of blockchain interoperability?

A token that automatically rebalances across multiple DeFi pools
An NFT that wraps multiple fungible tokens into a single asset
A token with built-in privacy features using zk-SNARKs
A tokenized version of an asset from one blockchain pegged 1:1 and usable on another blockchain (Correct answer)

Correct answer: A tokenized version of an asset from one blockchain pegged 1:1 and usable on another blockchain

Wrapped tokens (e.g., WBTC) lock the original asset in a custodial contract and mint an equivalent ERC-20 token on Ethereum, enabling cross-chain liquidity.

Question 67: Which blockchain platform is widely known for supporting smart contracts?

Ethereum (Correct answer)
Dogecoin
Ripple
Bitcoin

Correct answer: Ethereum

Question 68: An enterprise choosing to implement a private blockchain instead of a public one gains enhanced performance and data confidentiality at the expense of which key blockchain principle?

Usability
Decentralization (Correct answer)
Scalability
Interoperability

Correct answer: Decentralization

Private blockchains are controlled by a single entity, making them centralized. This centralization allows for higher performance and privacy controls but sacrifices the core benefit of decentralization, which provides the trustlessness and censorship resistance found in public networks.

Question 69: Which type of token grants holders access to a specific product or service within a blockchain platform?

Non-fungible token
Utility token (Correct answer)
Governance token
Security token

Correct answer: Utility token

Utility tokens grant holders the right to access or use a specific product or service within a blockchain platform, providing functional rather than investment value.

Question 70: A 'halving' event, such as the one that occurs in Bitcoin's protocol, has which primary economic effect on the mining ecosystem?

It doubles the transaction fees paid to miners to compensate for lost revenue.
It reduces the block subsidy component of the block reward by 50%. (Correct answer)
It increases the mining difficulty by a factor of two.
It immediately forces 50% of miners to shut down their operations.

Correct answer: It reduces the block subsidy component of the block reward by 50%.

A halving is a pre-programmed event in some cryptocurrencies' protocols that cuts the block subsidy—the number of new coins created with each block—in half. This directly reduces the revenue for miners from the subsidy portion of the block reward. While it can lead to decreased profitability and cause some miners to shut down, it does not automatically force 50% of them offline, nor does it directly affect transaction fees or the difficulty adjustment mechanism in this way.

Question 71: What property makes non-fungible tokens (NFTs) fundamentally different from fungible tokens like Bitcoin?

NFTs do not use distributed ledger technology for ownership verification
NFTs can only be created and traded on the Ethereum blockchain
Each NFT contains unique metadata and a distinct token ID making it non-interchangeable with any other token (Correct answer)
NFTs must always represent an underlying physical real-world asset

Correct answer: Each NFT contains unique metadata and a distinct token ID making it non-interchangeable with any other token

NFTs are unique digital assets with distinct metadata and token IDs, making each one non-interchangeable, unlike fungible tokens where every unit is identical and mutually replaceable.

Question 72: What ensures the immutability of blockchain data?

Encryption algorithms
Private keys
Data redundancy
Hash functions and consensus (Correct answer)

Correct answer: Hash functions and consensus

The immutability of blockchain data is primarily ensured by the combination of cryptographic hash functions and consensus mechanisms. Each block contains a hash of the previous block, making any alteration to past data immediately detectable. Consensus mechanisms, like Proof of Work, ensure that all network participants agree on the valid state of the ledger, making it extremely difficult to tamper with records.

Question 73: How should you document system architecture configurations?

Maintain up-to-date documentation in a centralized, accessible location (Correct answer)
Document only when asked by management
Keep all configuration details in personal memory
Store documentation on individual workstations

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 74: What is an Initial Coin Offering (ICO)?

A government-issued digital currency launch process
A fundraising mechanism where blockchain projects sell newly created tokens to early investors (Correct answer)
A competitive process for miners to earn the first block reward
The first transaction recorded on a newly launched blockchain

Correct answer: A fundraising mechanism where blockchain projects sell newly created tokens to early investors

An ICO is a fundraising mechanism where blockchain projects sell newly created tokens to early investors in exchange for established cryptocurrencies or fiat, analogous to an IPO in traditional finance.

Question 75: Which consensus method uses a reputation system for validator selection?

Proof of Stake
Proof of Work
Proof of History
Proof of Authority (Correct answer)

Correct answer: Proof of Authority

Proof of Authority (PoA) is a consensus mechanism where validators are pre-approved and known entities. Their identity and reputation are critical for their selection and ability to validate transactions. This system relies on trust in these authorized participants, making reputation a core component of validator selection.

Question 76: Which programming language is primarily used to write Ethereum smart contracts?

Go
Solidity (Correct answer)
Rust
Python

Correct answer: Solidity

Solidity is the primary high-level, contract-oriented programming language specifically developed for writing smart contracts on the Ethereum blockchain. It is syntactically similar to JavaScript and is the most widely used language for creating decentralized applications (dApps) and their underlying logic within the Ethereum ecosystem.

Question 77: In a Delegated Proof of Stake (DPoS) system, how are block producers (validators) chosen?

They are appointed by a centralized foundation that governs the blockchain.
The node with the highest computational power is chosen to produce the next block.
They are selected randomly by the protocol based on the size of their stake.
Token holders vote for a limited number of delegates to act as validators on their behalf. (Correct answer)

Correct answer: Token holders vote for a limited number of delegates to act as validators on their behalf.

Delegated Proof of Stake (DPoS) introduces a democratic layer to the staking model. Instead of all token holders being eligible to validate transactions, they use their tokens to vote for a specific number of delegates or witnesses. These elected delegates are then responsible for validating transactions and producing new blocks, and they share the rewards with those who voted for them.

Question 78: Which consensus algorithm is used by Bitcoin?

Proof of Work (Correct answer)
Delegated Proof of Stake
Proof of Stake
Proof of Authority

Correct answer: Proof of Work

Bitcoin, the first and most well-known cryptocurrency, utilizes the Proof of Work (PoW) consensus algorithm. In PoW, miners compete to solve a complex computational puzzle to validate transactions and add new blocks to the blockchain. The first miner to find the solution earns the right to add the block and receive a reward.

Question 79: Which approach is recommended for implementing system architecture changes?

Making all changes at once without testing
Implementing changes only during peak hours
Skipping documentation to save time
Following a structured change management process with testing (Correct answer)

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 80: Which blockchain consensus mechanism is designed for scalability and speed?

Proof of Elapsed Time
Proof of Work
Delegated Proof of Stake (Correct answer)
Proof of Authority

Correct answer: Delegated Proof of Stake

Delegated Proof of Stake (DPoS) enhances scalability and speed by allowing token holders to elect a limited number of delegates to validate transactions and create blocks. This streamlined process, with fewer participants involved in consensus, significantly reduces block confirmation times and increases transaction throughput compared to other mechanisms like Proof of Work.

Question 81: In a Proof of Stake (PoS) consensus mechanism, how are participants chosen to validate new blocks and add them to the chain?

Based on the amount of cryptocurrency they hold and are willing to 'stake' as collateral. (Correct answer)
Randomly, with every node having an equal chance of being selected.
Based on who solves a complex mathematical puzzle the fastest.
Through a voting system where only elected delegates can validate blocks.

Correct answer: Based on the amount of cryptocurrency they hold and are willing to 'stake' as collateral.

Proof of Stake (PoS) is a consensus mechanism where block validators are chosen based on the number of coins they hold and have staked. This is different from Proof of Work (PoW), which relies on computational power. Staking provides a financial incentive for validators to act honestly, as they can lose their stake for malicious behavior.

Question 82: In the context of blockchain technology, what is a primary benefit of using zk-SNARKs (Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge) beyond providing privacy?

They are exclusively used for Proof-of-Stake consensus mechanisms.
They eliminate the need for private keys to authorize transactions.
They enable data compression, which can significantly improve scalability. (Correct answer)
They increase the on-chain data storage requirements for transactions.

Correct answer: They enable data compression, which can significantly improve scalability.

The 'Succinct' in zk-SNARKs means that the cryptographic proofs are very small and quick to verify. This allows complex computations to be executed off-chain, with only a small proof being posted on-chain for verification. This data compression significantly reduces the data load on the blockchain, enhancing scalability.

Question 83: What is a 'constitutional DAO' governance approach?

A DAO governed exclusively by its founding developers
A DAO where all proposals require unanimous approval
A government-regulated DAO structure recognized under US law
A DAO with a written charter defining immutable rules, member rights, and governance processes (Correct answer)

Correct answer: A DAO with a written charter defining immutable rules, member rights, and governance processes

A constitutional DAO codifies its founding principles and governance rules in a document (often on-chain), providing stability and clarity for members.

Question 84: What is the primary characteristic that distinguishes a consortium blockchain from a private blockchain?

It is completely open for anyone to join and validate.
Governance is shared among multiple organizations. (Correct answer)
It is the only type that can execute smart contracts.
Transaction speeds are significantly slower.

Correct answer: Governance is shared among multiple organizations.

The defining difference is governance. A private blockchain is controlled and operated by a single organization. A consortium blockchain is governed by a pre-selected group of organizations that share control and decision-making, making it semi-decentralized.

Question 85: What security consideration is most important in system architecture?

Implementing the principle of least privilege and defense in depth (Correct answer)
Using a single strong password for all systems
Security is not relevant to this area
Disabling logging to improve performance

Correct answer: Implementing the principle of least privilege and defense in depth

The principle of least privilege combined with defense in depth provides layered security that protects against various attack vectors.

Question 86: What is a 'state channel' and how does it improve blockchain scalability?

A sharded partition of the blockchain state assigned to a validator subset
A smart contract that batches state transitions and submits them hourly
A dedicated high-bandwidth channel between full nodes for faster block propagation
A private off-chain communication channel where parties exchange signed state updates, settling only the final state on-chain (Correct answer)

Correct answer: A private off-chain communication channel where parties exchange signed state updates, settling only the final state on-chain

State channels allow parties to conduct many interactions off-chain by exchanging cryptographically signed messages, posting only the final outcome to the blockchain.

Question 87: What is a key benefit of dApps over traditional apps?

Controlled by a central database
Faster download speed
Requires no internet
Censorship resistance (Correct answer)

Correct answer: Censorship resistance

A key benefit of dApps over traditional applications is their censorship resistance. Because dApps operate on decentralized blockchain networks, they are not controlled by a single entity and cannot be easily shut down, altered, or censored by governments or corporations. This ensures continuous availability and user access.

Question 88: A government agency is developing a system for issuing digital academic credentials. They want to store sensitive student details on a permissioned network but anchor cryptographic proofs of these credentials onto a public blockchain. This allows anyone to verify the credentials' authenticity without accessing private data. This architecture describes which type of platform?

Public Blockchain
Private Blockchain
Hybrid Blockchain (Correct answer)
Consortium Blockchain

Correct answer: Hybrid Blockchain

A hybrid blockchain combines features of both private and public chains. In this scenario, the private portion handles confidential data and access control, while the public portion provides an immutable, publicly verifiable proof of the data's integrity, which is a classic use case for this model.

Question 89: What is a key benefit of dApps over traditional apps?

Censorship resistance (Correct answer)
Controlled by a central database
Requires no internet
Faster download speed

Correct answer: Censorship resistance

Question 90: What is Ethereum's EIP-4844 (Proto-Danksharding) designed to improve?

Implementing full sharding with 64 shards for parallel transaction processing
Enabling Ethereum to process 100,000 TPS natively without Layer 2 solutions
Reducing the cost of posting rollup data to Ethereum by introducing temporary 'blob' data storage (Correct answer)
Adding native cross-chain messaging to the Ethereum protocol

Correct answer: Reducing the cost of posting rollup data to Ethereum by introducing temporary 'blob' data storage

EIP-4844 introduces blob-carrying transactions that provide cheap, temporary data storage specifically for rollups, dramatically reducing L2 transaction costs.

Question 91: A mining operation is evaluating its profitability. Which of the following factors is the MOST direct and significant variable affecting their immediate revenue?

The number of nodes on the network.
The market capitalization of the cryptocurrency.
The block reward, which is composed of the block subsidy and transaction fees. (Correct answer)
The cost of their mining hardware (ASICs).

Correct answer: The block reward, which is composed of the block subsidy and transaction fees.

A miner's direct revenue comes from successfully mining a block and receiving the block reward. This reward consists of two parts: the block subsidy (newly created coins) and the transaction fees from all transactions included in that block. While hardware cost is a major expense (capital expenditure) and market cap is an indirect factor influencing price, the block reward is the immediate income.

Question 92: Which of the following is a primary advantage of using a public, permissionless blockchain for an application requiring high levels of censorship resistance and transparency?

Centralized control over participant access.
Low and predictable transaction fees.
Anyone can join and validate transactions without approval. (Correct answer)
Data is encrypted and visible only to specific parties.

Correct answer: Anyone can join and validate transactions without approval.

The permissionless and decentralized nature of public blockchains means no central authority can block users or transactions. This open participation is the foundation of its censorship resistance and transparency, as the ledger is publicly auditable by anyone.

Question 93: Which FATF (Financial Action Task Force) guidance directly impacts how US crypto businesses handle cross-border transfers?

FATF Recommendation 20 (Suspicious Transaction Reporting)
FATF Recommendation 5 (Customer Due Diligence)
FATF Recommendation 16 (Travel Rule) (Correct answer)
FATF Recommendation 35 (Sanctions)

Correct answer: FATF Recommendation 16 (Travel Rule)

FATF Recommendation 16, known as the Travel Rule, requires VASPs to share originator and beneficiary information for crypto transfers above the threshold.

Question 94: What should you do when troubleshooting a system architecture issue?

Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Immediately restart all systems
Make random changes until the problem goes away
Escalate everything without investigation

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 95: What does a token's 'velocity' measure in tokenomics analysis?

The speed at which the protocol's smart contract mints new tokens per block
The rate at which the token's market price appreciates over a given time period
How frequently a token is spent or transferred rather than held, which can affect its store-of-value properties (Correct answer)
The number of unique wallet addresses actively holding the token at any time

Correct answer: How frequently a token is spent or transferred rather than held, which can affect its store-of-value properties

Token velocity measures how frequently a token changes hands; high velocity means tokens are quickly spent or traded rather than held, which can reduce the token's utility as a store of value and dampen price appreciation.

Question 96: Which programming language is primarily used to write Ethereum smart contracts?

Solidity (Correct answer)
Go
Python
Rust

Correct answer: Solidity

Question 97: Which of the following is a primary characteristic that distinguishes a smart contract from a traditional legal contract?

It is written in a natural, human-readable language.
It relies on a central authority or legal system for enforcement.
It can be easily amended by any party after it has been agreed upon.
Its terms are self-executing and enforced by code on a blockchain. (Correct answer)

Correct answer: Its terms are self-executing and enforced by code on a blockchain.

The core difference is that a smart contract is a self-executing agreement with the terms of the agreement directly written into lines of code. It automatically enforces the rules and obligations defined within it when predetermined conditions are met, without the need for a traditional intermediary or legal system.

Question 98: What defines a decentralized application (dApp)?

Runs on centralized cloud
Runs on a blockchain and uses smart contracts (Correct answer)
Only accessible via mobile
Owned by a single company

Correct answer: Runs on a blockchain and uses smart contracts

A dApp operates on a decentralized network and uses smart contracts to execute its backend logic.

Question 99: In a Proof-of-Work blockchain like Bitcoin, what is the primary purpose of the difficulty adjustment?

To ensure the block generation time remains consistent despite changes in network hash rate. (Correct answer)
To decrease the energy consumption of the mining process.
To increase the total supply of the cryptocurrency over time.
To directly set the market price of the cryptocurrency.

Correct answer: To ensure the block generation time remains consistent despite changes in network hash rate.

The difficulty adjustment is a fundamental mechanism that retargets the complexity of the cryptographic puzzle miners must solve. It occurs at regular intervals (every 2016 blocks in Bitcoin) to maintain a consistent block creation time (approximately 10 minutes for Bitcoin). If the network's total hashing power increases and blocks are found too quickly, the difficulty increases. Conversely, if hashing power leaves the network and blocks are found too slowly, the difficulty decreases.

Question 100: In the context of a Bitcoin block, what is the primary purpose of a Merkle Tree?

To reach consensus among network nodes.
To encrypt the transaction data for confidentiality.
To efficiently and securely verify the integrity of a large set of transactions. (Correct answer)
To generate new private keys for each transaction.

Correct answer: To efficiently and securely verify the integrity of a large set of transactions.

A Merkle Tree, or hash tree, summarizes all the transactions in a block by repeatedly hashing pairs of transaction hashes until a single hash, the Merkle Root, is left. This structure allows for efficient verification of transactions; a user can check if a transaction is included in a block by only needing the Merkle Root and a small number of hashes (the Merkle proof), rather than downloading and checking every single transaction.

Certified Blockchain Expert (CBE)

The Certified Blockchain Expert (CBE) is a vendor-neutral certification by Blockchain Council that validates expertise in blockchain technology, covering distributed ledger concepts, consensus mechanisms, smart contracts, blockchain platforms, mining, and security for enterprise applications.

100

Questions

90 min

Time Limit

60%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds