CBSE - Certified Blockchain Security Expert Enterprise Blockchain Security Questions and Answers

Question 1

In a Hyperledger Fabric network, which component is primarily responsible for issuing and validating identities and defining the roles of participating members?

Accepted Answer

The Membership Service Provider (MSP)

Answer

The Orderer Service

Answer

The Peer Node

Answer

The Chaincode

Question 2

An enterprise consortium is building a supply chain solution on Hyperledger Fabric. They need to ensure that transactions related to pricing negotiations between a supplier and a retailer are kept confidential and are not visible to other members of the consortium, like logistics providers. Which Hyperledger Fabric feature is specifically designed to address this requirement for data isolation?

Accepted Answer

Channels

Answer

Endorsement Policies

Answer

Gossip Protocol

Answer

Private Data Collections

Question 3

For a large-scale enterprise blockchain solution, what is considered the most secure industry-standard method for managing the private keys of critical identities, such as Certificate Authorities or Orderer nodes, to protect them from both software and physical threats?

Accepted Answer

Storing keys within a Hardware Security Module (HSM).

Answer

Storing keys in an encrypted file on the node's hard drive.

Answer

Using a cloud-based Key Management Service (KMS).

Answer

Embedding the keys directly in the application configuration files.

Question 4

Which of the following best describes the primary security function of an endorsement policy in Hyperledger Fabric?

Accepted Answer

To define the set of organizations that must execute and approve a transaction before it can be considered valid.

Answer

To encrypt transaction data before it is written to the ledger.

Answer

To manage the identities and certificates of all network participants.

Answer

To order transactions into blocks to be delivered to peer nodes.

Question 5

An enterprise wants to build a blockchain system to verify academic credentials. A university needs to issue a credential, and an employer needs to verify that a candidate has a valid degree without seeing the student's specific grades or other private details. Which cryptographic technique is best suited for this privacy-preserving verification?

Accepted Answer

Zero-Knowledge Proofs (ZKPs)

Answer

Homomorphic Encryption

Answer

Public Key Infrastructure (PKI)

Answer

Secure Multi-Party Computation (SMPC)

Question 6

A developer writes a Hyperledger Fabric chaincode function that uses the CouchDB state database. The function dynamically constructs a rich query string by concatenating user-provided input directly into the JSON query selector. A security audit flags this as a major vulnerability. What type of attack is this code susceptible to?

Accepted Answer

Parameter Injection

Answer

Reentrancy Attack

Answer

Cross-Site Scripting (XSS)

Answer

Integer Underflow