Certified Blockchain Professional (CBCP) Exam — Questions and Answers
Question 1: What is the primary purpose of a cryptocurrency 'mempool'?
- A temporary holding area for unconfirmed transactions awaiting inclusion in a block (Correct answer)
- Long-term storage of confirmed transactions
- A pool of mining rewards not yet distributed
- A database of wallet addresses and balances
Correct answer: A temporary holding area for unconfirmed transactions awaiting inclusion in a block
The mempool (memory pool) is a node's staging area for valid but unconfirmed transactions, ordered by fee priority for miners/validators.
Question 2: What is the primary role of a nonce in a Proof-of-Work blockchain hash puzzle?
- To encrypt the block data
- To compress the transaction list
- To sign the miner's identity
- To vary the input so miners can find a valid hash (Correct answer)
Correct answer: To vary the input so miners can find a valid hash
Miners iterate the nonce value to change the block header input until the resulting hash meets the network's difficulty target.
Question 3: In Ethereum's signature scheme, what is the purpose of the 'v' value returned alongside r and s?
- It allows recovery of the public key from the signature (Correct answer)
- It specifies the hash algorithm used
- It indicates signature validity
- It encodes the transaction nonce
Correct answer: It allows recovery of the public key from the signature
The 'v' recovery identifier allows the verifier to reconstruct the public key directly from the signature and message hash.
Question 4: Data is stored in the form of on blockchains.
- Blocks (Correct answer)
- lines
- Circle
- None of above
Correct answer: Blocks
On blockchains, data is organized and stored in discrete units called 'blocks.' Each block contains a list of transactions, a timestamp, and a cryptographic hash of the previous block, linking them together in a continuous chain. This structure ensures the chronological order and integrity of the entire ledger, making it highly secure and immutable.
Question 5: What is the EVM (Ethereum Virtual Machine) stack-based architecture's maximum stack depth?
- 2048 elements
- 256 elements
- 1024 elements (Correct answer)
- 512 elements
Correct answer: 1024 elements
The EVM has a maximum stack depth of 1024 items; exceeding this limit causes a stack overflow and reverts the transaction.
Question 6: In the context of blockchain wallets, what does BIP-32 define?
- A new hashing algorithm for addresses
- A standard for hierarchical deterministic (HD) wallet key derivation (Correct answer)
- The elliptic curve parameters for secp256k1
- A threshold signature scheme
Correct answer: A standard for hierarchical deterministic (HD) wallet key derivation
BIP-32 specifies how a single master seed can deterministically derive a tree of child public and private keys for HD wallets.
Question 7: Which tool is most commonly used to test and deploy Ethereum smart contracts in a local development environment?
- Hardhat or Truffle (Correct answer)
- Etherscan
- Infura
- MetaMask
Correct answer: Hardhat or Truffle
Hardhat and Truffle provide local Ethereum node emulation, automated testing frameworks, and deployment scripts for smart contract development.
Question 8: In mining economics, what is the 'block subsidy' and how does it change over time in Bitcoin?
- A pool payout mechanism distributing rewards equally; resets annually
- A fee paid by the network to compensate for electricity costs; increases with difficulty
- The newly created Bitcoin awarded to the miner who finds each block; halves approximately every four years (Correct answer)
- A government subsidy paid to encourage sustainable mining; remains fixed
Correct answer: The newly created Bitcoin awarded to the miner who finds each block; halves approximately every four years
The block subsidy is the amount of new Bitcoin created per block (starting at 50 BTC), which halves every 210,000 blocks (~4 years) in an event called the 'halving,' ultimately capping supply at 21 million BTC.
Question 9: Which consensus mechanism does Solana use to achieve its high throughput?
- Directed Acyclic Graph (DAG) consensus
- Proof of History combined with Tower BFT (Correct answer)
- Proof of Work with parallel ASIC mining
- Federated Byzantine Agreement
Correct answer: Proof of History combined with Tower BFT
Solana uses Proof of History (a verifiable delay function creating a cryptographic clock) combined with Tower BFT to achieve consensus without requiring nodes to communicate timestamps.
Question 10: What is a 'DAO treasury' in the context of decentralized organizations?
- A hardware wallet controlled jointly by the DAO's founding team
- An automated smart contract that distributes revenue equally to all token holders monthly
- A pool of funds collectively owned and managed by token holders through governance votes (Correct answer)
- A centralized bank account registered under the DAO's legal entity
Correct answer: A pool of funds collectively owned and managed by token holders through governance votes
A DAO treasury is an on-chain pool of assets governed by token holder proposals and votes, funding development, grants, and operational expenses without centralized control.
Question 11: In the context of blockchain, what does the term 'fork' refer to?
- A change in the blockchain protocol that creates two diverging chains (Correct answer)
- A type of smart contract upgrade pattern
- A cryptographic key-splitting technique
- A method for merging two separate blockchains
Correct answer: A change in the blockchain protocol that creates two diverging chains
A fork occurs when a change in protocol rules causes nodes to split, potentially following two different versions of the chain.
Question 12: What problem does the 'commit-reveal' scheme solve in smart contract-based applications?
- It prevents front-running by hiding a user's intent until after the commitment phase (Correct answer)
- It reduces gas costs by batching state changes
- It enables cross-chain communication without a bridge
- It compresses calldata to reduce transaction size
Correct answer: It prevents front-running by hiding a user's intent until after the commitment phase
In a commit-reveal scheme, users first submit a hash of their action (commit), then later reveal the actual action, preventing others from copying or front-running the intent.
Question 13: A consortium of competing manufacturers wants to build a supply chain solution on Hyperledger Fabric. They need to share transactional data with their direct suppliers and logistics partners, but want to ensure that pricing and quantity details remain confidential from other competing manufacturers on the same network. Which Hyperledger Fabric feature is specifically designed to address this requirement?
- The Membership Service Provider (MSP)
- State-based endorsement
- Channels (Correct answer)
- The ordering service
Correct answer: Channels
Hyperledger Fabric's channels act as private 'sub-networks' within the main blockchain network. [5, 12] By creating a channel that includes only the manufacturer, its suppliers, and its logistics partners, all transactions and ledger data for that specific supply line are isolated and kept confidential from other members (like competing manufacturers) who are not part of that channel. [3, 6, 10]
Question 14: Which international body sets global AML and counter-terrorism financing (CTF) standards that many countries apply to crypto?
- IMF
- BIS (Bank for International Settlements)
- FATF (Financial Action Task Force) (Correct answer)
- World Bank
Correct answer: FATF (Financial Action Task Force)
The Financial Action Task Force (FATF) sets global AML and CTF standards, including the 'Travel Rule' that many countries have adopted for cryptocurrency service providers.
Question 15: What is 'impermanent loss' in DeFi liquidity provision?
- The penalty for withdrawing staked assets before the lock-up period ends
- Funds permanently lost due to a smart contract exploit
- The temporary reduction in value a liquidity provider experiences compared to simply holding the assets, caused by price divergence (Correct answer)
- Transaction fees lost when a trade fails to execute
Correct answer: The temporary reduction in value a liquidity provider experiences compared to simply holding the assets, caused by price divergence
Impermanent loss occurs when the price ratio of pooled assets changes from deposit time; the loss becomes permanent only if the LP withdraws before prices revert.
Question 16: Which governance concept describes a blockchain network where changes require agreement from a defined subset of network participants?
- Multisig governance
- Proof of Authority
- Threshold governance (Correct answer)
- BFT-based governance
Correct answer: Threshold governance
Threshold governance requires a predefined minimum number or percentage of participants to agree before a protocol change or transaction is approved.
Question 17: A user wants to interact with a decentralized finance (DeFi) protocol. The protocol uses a cryptocurrency that is divisible to eight decimal places and where every unit of the currency is identical and interchangeable with another. Which Ethereum token standard is MOST likely used for this cryptocurrency?
- ERC-1155
- ERC-20 (Correct answer)
- ERC-1400
- ERC-721
Correct answer: ERC-20
The ERC-20 standard is designed for fungible tokens, which are interchangeable and divisible, making them ideal for use as cryptocurrencies within DeFi applications and exchanges. ERC-721 is for unique, non-fungible tokens. ERC-1155 is a multi-token standard that can handle both fungible and non-fungible tokens, but ERC-20 is the specific and most common standard for fungible cryptocurrencies on Ethereum.
Question 18: What distinguishes a 'cold wallet' from a 'hot wallet' in cryptocurrency asset management?
- Cold wallets are kept offline and disconnected from the internet, while hot wallets remain connected online (Correct answer)
- Cold wallets use hardware encryption while hot wallets use software encryption
- Cold wallets require multi-signature authorization while hot wallets require only a single key
- Cold wallets store only stablecoins while hot wallets hold volatile assets
Correct answer: Cold wallets are kept offline and disconnected from the internet, while hot wallets remain connected online
Cold wallets (hardware or paper) store private keys offline, making them immune to remote hacking, while hot wallets maintain internet connectivity for convenience at the cost of greater attack surface.
Question 19: What role does public key cryptography play in the blockchain?
- Ensuring secure digital signatures for transactions (Correct answer)
- Mining new tokens
- Managing network nodes
- Storing blockchain data
Correct answer: Ensuring secure digital signatures for transactions
Public key cryptography plays a vital role in the blockchain by enabling secure digital signatures for transactions. Users generate a pair of keys: a private key for signing transactions and a public key for verifying those signatures. This mechanism ensures that only the rightful owner can authorize a transaction and that the transaction's authenticity and integrity can be publicly verified without revealing the private key.
Question 20: What form of public witness do blockchains use?
- A node on a blockchain network attests to the accuracy and truthfulness of information. (Correct answer)
- A digital courthouse or library acts as a public witness to store information to reference.
- A person sends a transaction over a public network to earn rewards as a public witness.
- A preferred node can be elected to attest to the accuracy and truthfulness of information.
Correct answer: A node on a blockchain network attests to the accuracy and truthfulness of information.
Blockchains use a form of public witness where multiple independent nodes on the network collectively attest to the accuracy and truthfulness of information. Instead of relying on a single central authority, transactions and data are verified and confirmed by a distributed network of participants. This decentralized attestation ensures transparency, immutability, and trust in the ledger, as consensus is reached across the network.
Question 21: What benefits may blockchain networks bring to the Internet of Things (IoT)?
- Solving expensive and complex calculations using Hyperledger Fabric mining
- Allowing blockchain users to follow self-driving cars and access these cars
- Enabling software that programs itself to solve problems without human intervention
- Avoiding a spoofing attack using the secured identity that is stored on a blockchain (Correct answer)
Correct answer: Avoiding a spoofing attack using the secured identity that is stored on a blockchain
Blockchain networks can significantly enhance the security of IoT devices by providing a secure and immutable ledger for device identities. By storing verified identities on a blockchain, it becomes much harder for malicious actors to impersonate legitimate devices, thereby preventing spoofing attacks. This ensures that only authenticated IoT devices can participate and interact within the network, building a more trustworthy ecosystem.
Question 22: Which design pattern is used in DApps to separate concerns by having a frontend interact with multiple specialized smart contracts rather than one monolithic contract?
- Diamond (EIP-2535) or modular contract pattern (Correct answer)
- Monolith pattern
- Factory pattern only
- Singleton pattern
Correct answer: Diamond (EIP-2535) or modular contract pattern
Modular contract patterns like the Diamond standard (EIP-2535) split logic into facets or separate contracts, improving maintainability and enabling upgrades without size limits.
Question 23: Which consensus algorithm uses the least energy?
- Proof of Authority (PoA)
- Proof of Space (PoSpace)
- Delegated Proof of Stake (DPoS)
- Proof of Work (PoW) (Correct answer)
Correct answer: Proof of Work (PoW)
Proof of Work (PoW) is a consensus algorithm that secures the blockchain by requiring miners to expend significant computational effort to solve a cryptographic puzzle. While PoW is fundamental to the security of many robust, decentralized networks, it is widely recognized as the most energy-intensive among common consensus mechanisms. Other algorithms like Proof of Stake (PoS) and Proof of Authority (PoA) are generally designed to be far more energy-efficient.
Question 24: What Solidity design pattern places the 'check-effects-interactions' principle to prevent reentrancy?
- Update state variables before external calls (Correct answer)
- Use delegatecall for all transfers
- Avoid using modifiers
- Update state variables after external calls
Correct answer: Update state variables before external calls
The checks-effects-interactions pattern requires updating contract state before making any external calls to prevent reentrancy.
Question 25: What is the difference between a public blockchain's transparency model and zero-knowledge proof-enhanced privacy?
- Public blockchains encrypt all data; ZKPs decrypt it for authorized parties
- ZKPs replace consensus mechanisms in private blockchains
- Public blockchains use ZKPs by default; privacy chains disable them
- Public blockchains expose all transaction data; ZKPs allow proving transaction validity without revealing the underlying data (Correct answer)
Correct answer: Public blockchains expose all transaction data; ZKPs allow proving transaction validity without revealing the underlying data
Public chains are transparent by default; ZKPs (as in Zcash's zk-SNARKs) let nodes verify that rules are followed (balances don't go negative) without seeing amounts or addresses.
Question 26: Which of the following best describes an 'Initial DEX Offering' (IDO)?
- A governance vote to list a token on Uniswap
- A token sale conducted through a centralized exchange
- An audit process for new token smart contracts
- A fundraising method where tokens are launched and immediately traded on a decentralized exchange (Correct answer)
Correct answer: A fundraising method where tokens are launched and immediately traded on a decentralized exchange
An IDO launches tokens directly on a decentralized exchange, providing instant liquidity and open participation without a centralized intermediary.
Question 27: What is a 'crypto dusting attack'?
- Generating fake blocks to temporarily fork the blockchain
- Sending tiny amounts of cryptocurrency to wallets to de-anonymize owners by tracking subsequent transactions (Correct answer)
- Overloading a node with invalid transaction requests
- Flooding the network with tiny transactions to cause congestion and raise fees
Correct answer: Sending tiny amounts of cryptocurrency to wallets to de-anonymize owners by tracking subsequent transactions
Dusting attacks send tiny 'dust' amounts to many wallets; if recipients move those funds, analysts can cluster and link addresses to reveal wallet ownership.
Question 28: In enterprise blockchain governance, what is a 'permissioned' network's primary advantage over a public blockchain for regulated industries?
- Permissioned networks have lower hardware requirements for node operation
- Permissioned networks are always faster due to fewer nodes
- Permissioned networks allow known, vetted identities and regulatory compliance controls (Correct answer)
- Permissioned networks eliminate the need for consensus mechanisms entirely
Correct answer: Permissioned networks allow known, vetted identities and regulatory compliance controls
Permissioned blockchains restrict participation to vetted entities, enabling KYC/AML compliance, auditability by regulators, and governance controls required in finance, healthcare, and supply chain.
Question 29: Which vulnerability allows an attacker to repeatedly call a function before the first execution finishes, draining a contract's funds?
- Front-running
- Reentrancy attack (Correct answer)
- Denial of service
- Integer overflow
Correct answer: Reentrancy attack
Reentrancy attacks exploit the ability to re-enter a function before its state is updated, as famously demonstrated by The DAO hack in 2016.
Question 30: What is 'checkpoint finality' as used in Ethereum's Casper FFG protocol?
- Validators vote to finalize specific epoch boundary blocks, making them irreversible once 2/3 supermajority is reached (Correct answer)
- Miners checkpoint their work every 100 blocks to prevent reorgs
- A committee finalizes blocks based on the longest PoW chain rule
- Every transaction is individually finalized as it is included in a block
Correct answer: Validators vote to finalize specific epoch boundary blocks, making them irreversible once 2/3 supermajority is reached
Casper FFG finalizes 'checkpoint' blocks at epoch boundaries when validators cast source-to-target votes achieving a 2/3 supermajority, making those blocks economically irreversible.
Question 31: What is 'slippage' in the context of cryptocurrency trading?
- A smart contract vulnerability caused by reentrancy
- The difference between the expected price of a trade and the actual execution price (Correct answer)
- A consensus failure causing a chain split
- Loss of private key access due to software errors
Correct answer: The difference between the expected price of a trade and the actual execution price
Slippage occurs when market conditions change between order submission and execution, or in AMMs when large trades move the pool's price mid-transaction.
Question 32: What is a 51% attack's relationship to cryptographic security in proof-of-work blockchains?
- It compromises private keys of honest miners
- It overcomes cryptographic difficulty by controlling majority hash rate, enabling double-spend reorgs (Correct answer)
- It breaks the SHA-256 hash function directly
- It exploits a flaw in ECDSA signature verification
Correct answer: It overcomes cryptographic difficulty by controlling majority hash rate, enabling double-spend reorgs
A 51% attack doesn't break cryptography; it uses majority hash power to rewrite recent chain history, enabling double-spending by reversing confirmed transactions.
Question 33: In the context of Ethereum, what is gas?
- The computational resources required to perform transactions.
- The required cost to perform a transaction on the network. (Correct answer)
- The security level of the Ethereum network.
- The gas produced by Ethereum servers.
Correct answer: The required cost to perform a transaction on the network.
The cost of a transaction on the Ethereum network is called gas. Gas costs paid by the transaction originator serve as an incentive for miners, who donate their computational resources to the network's management.
Question 34: Which of the following describes a Decentralized Autonomous Organization (DAO)?
- A government agency that uses smart contracts to automate regulatory compliance.
- A corporation that uses blockchain to track its physical assets and supply chain.
- A software company that develops dApps for a variety of blockchain platforms.
- An internet-native organization where rules are encoded as smart contracts and operational decisions are made by its members, typically through voting with governance tokens. (Correct answer)
Correct answer: An internet-native organization where rules are encoded as smart contracts and operational decisions are made by its members, typically through voting with governance tokens.
A Decentralized Autonomous Organization (DAO) is an entity with no central leadership. It is collectively owned and managed by its members. Its rules are encoded in smart contracts on a blockchain, and decisions are made through proposals and voting by members, who typically hold governance tokens that represent voting power.
Question 35: What distinguishes a 'pure' function from a 'view' function in Solidity?
- Pure functions can modify state; view functions cannot
- Pure functions neither read nor modify state; view functions can read but not modify state (Correct answer)
- Pure functions are payable; view functions are not
- Pure functions require on-chain verification; view functions do not
Correct answer: Pure functions neither read nor modify state; view functions can read but not modify state
A pure function promises to neither read nor write contract state, while a view function may read state but not modify it.
Question 36: What is the purpose of a 'token burn' mechanism in cryptocurrency?
- To permanently remove tokens from circulation, reducing supply (Correct answer)
- To penalize validators for double-signing
- To reset a token's price to its initial value
- To convert utility tokens into security tokens
Correct answer: To permanently remove tokens from circulation, reducing supply
Token burns permanently destroy tokens by sending them to an unspendable address, reducing circulating supply which can create deflationary pressure.
Question 37: A text string is used as a key by _____________ to perform a sequence of shifts on the plain-text.
- Shift Cipher
- Vigenere Cipher (Correct answer)
- Block Cipher
- Playfair Cipher
Correct answer: Vigenere Cipher
The Vigenere Cipher uses a text string as a key and a series of shifts on the plain-text to encrypt data. In this case, the sender and the recipient agree on a single key.
Question 38: What is 'MEV' (Maximal Extractable Value) in the context of Ethereum?
- The maximum value locked in a single DeFi protocol
- The maximum gas fee a user can set for a transaction
- Profit validators or block proposers can earn by reordering, inserting, or censoring transactions within a block (Correct answer)
- The total ETH issuance per epoch for validators
Correct answer: Profit validators or block proposers can earn by reordering, inserting, or censoring transactions within a block
MEV arises because block proposers control transaction ordering, enabling strategies like sandwich attacks, arbitrage, and liquidations.
Question 39: In Ethereum's Casper FFG finality mechanism, what is required for a checkpoint to be 'justified'?
- More than 50% of active validators must vote for the checkpoint
- A supermajority (≥2/3) of the total staked ETH must attest to a link between two checkpoints (Correct answer)
- The checkpoint block must be at least 64 slots old
- At least one epoch must pass after the checkpoint without a fork
Correct answer: A supermajority (≥2/3) of the total staked ETH must attest to a link between two checkpoints
Casper FFG requires a two-thirds supermajority vote by stake weight to justify a source-to-target checkpoint link.
Question 40: What does 'proof of reserves' mean in the cryptocurrency exchange context?
- A cryptographic verification that an exchange holds sufficient assets to cover all customer deposits (Correct answer)
- A government audit confirming an exchange's legal registration
- A smart contract that automatically reimburses users if an exchange is hacked
- A blockchain record of all trades executed on a centralized exchange
Correct answer: A cryptographic verification that an exchange holds sufficient assets to cover all customer deposits
Proof of reserves uses Merkle trees and cryptographic attestations to verify an exchange holds 1:1 (or more) backing for all customer funds.
Question 41: Which year saw the development of blockchain technology?
- 2015
- 2009
- 2008 (Correct answer)
- 2010
Correct answer: 2008
Blockchain technology was first developed in 2008. It was conceptualized by an anonymous entity known as Satoshi Nakamoto, who published a whitepaper describing the technology as the underlying mechanism for the cryptocurrency Bitcoin. The Bitcoin network, the first practical application of blockchain, launched in early 2009.
Question 42: What is 'finality' in the context of blockchain consensus, and which type is typically provided by BFT protocols?
- Finality means blocks are mined faster; BFT provides economic finality
- Finality means transactions are irreversible; BFT provides absolute (deterministic) finality (Correct answer)
- Finality refers to fee settlement; BFT provides instant fee clearing
- Finality means transactions are irreversible; BFT provides probabilistic finality
Correct answer: Finality means transactions are irreversible; BFT provides absolute (deterministic) finality
BFT-based protocols provide deterministic (absolute) finality — once a block is committed, it cannot be reverted, unlike the probabilistic finality of PoW chains.
Question 43: A Decentralized Autonomous Organization (DAO) is being established to manage a DeFi protocol. How are major decisions, such as updating smart contract parameters or allocating treasury funds, typically made in a DAO?
- Through proposals and voting by community members who hold governance tokens. (Correct answer)
- By the lead development team without external input.
- Through a hierarchical management structure led by a CEO.
- By a centralized board of directors appointed by the founders.
Correct answer: Through proposals and voting by community members who hold governance tokens.
A core principle of a DAO is decentralized governance. Decisions are not made by a central authority but are instead proposed by and voted on by the community of members. Typically, voting power is proportional to the number of governance tokens a member holds.
Question 44: What is the 'ABI' (Application Binary Interface) in the context of Ethereum smart contracts?
- The bytecode representation stored on the blockchain
- A cryptographic hash of the contract bytecode
- A digital signature proving contract ownership
- A JSON description of a contract's functions and events used to encode/decode interactions (Correct answer)
Correct answer: A JSON description of a contract's functions and events used to encode/decode interactions
The ABI is a JSON specification that defines how to encode function calls and decode return values when interacting with a deployed smart contract.
Question 45: In a ring signature scheme used by privacy coins like Monero, what is concealed?
- The signature algorithm used to prevent fingerprinting
- The transaction amount only
- The identity of the actual signer among a group of possible signers (Correct answer)
- The recipient's address using stealth key derivation
Correct answer: The identity of the actual signer among a group of possible signers
Ring signatures allow a signer to produce a signature on behalf of a group, making it cryptographically indistinguishable which group member actually signed.
Question 46: What is 'composability' (often called 'money legos') in the context of DeFi protocols?
- The ability to encrypt multiple DeFi transactions simultaneously for batch processing
- The ability of DeFi protocols to interoperate and build upon each other like modular building blocks (Correct answer)
- The process of forking existing blockchains to compose new derivative networks
- A method of compressing blockchain transaction data for improved throughput
Correct answer: The ability of DeFi protocols to interoperate and build upon each other like modular building blocks
DeFi composability refers to the ability of protocols to integrate and build upon each other's smart contracts, enabling complex financial products to be constructed from simpler primitives.
Question 47: How do blockchain supply chains function better?
- By stabilizing the national currencies of the countries involved
- By automatically creating trade agreements between two parties
- By creating safe centralized marketplaces to trade goods on
- By transferring tokenized ownership through a software system (Correct answer)
Correct answer: By transferring tokenized ownership through a software system
Blockchain supply chains function better by enabling the transparent and immutable transfer of tokenized ownership through a software system. This allows for real-time tracking of goods and assets from origin to destination, enhancing traceability, reducing fraud, and improving efficiency. Tokenization provides a digital representation of physical assets, making ownership transfers secure and verifiable on the blockchain.
Question 48: Compared to the RSA algorithm, what is the primary advantage of using Elliptic Curve Cryptography (ECC) for generating key pairs in blockchain systems like Bitcoin and Ethereum?
- It provides the same level of security with significantly smaller key sizes. (Correct answer)
- The decryption process is mathematically simpler and faster.
- It is resistant to attacks from quantum computers.
- It uses a single key for both encryption and decryption.
Correct answer: It provides the same level of security with significantly smaller key sizes.
The main advantage of ECC over RSA is its efficiency. ECC can provide the same level of cryptographic security as RSA but with much smaller key sizes. For example, a 256-bit ECC key offers comparable security to a 3072-bit RSA key, which leads to lower computational overhead and faster processing, crucial for blockchain performance.
Question 49: A development team is building a decentralized social media platform. They want to ensure the user interface is fast and responsive, similar to a traditional web app, while the core logic for content ownership and user interactions is handled by smart contracts. Which of the following BEST describes a typical architectural stack for such a dApp?
- A traditional frontend (HTML/CSS/JS) interacts with smart contracts for backend logic, and may use decentralized storage (like IPFS) for media files. (Correct answer)
- The entire application, including the frontend UI and all data, is stored and executed directly on the blockchain.
- Smart contracts are used to query a centralized database where all user data and application logic is stored.
- The application logic is run on a centralized server which then batches transactions and submits them to the blockchain.
Correct answer: A traditional frontend (HTML/CSS/JS) interacts with smart contracts for backend logic, and may use decentralized storage (like IPFS) for media files.
A standard dApp architecture involves a separation of concerns. The frontend (user interface) is typically built with standard web technologies (HTML, CSS, JavaScript) for a good user experience. This frontend then communicates with the backend, which consists of smart contracts deployed on a blockchain. For large files like images or videos, decentralized storage solutions like IPFS are often used instead of storing them directly on the blockchain due to cost and performance constraints.
Question 50: What connects the blocks together in a linear sequence in the blockchain?
- Nodes
- Wallets
- Chains (Correct answer)
- Consensus Protocols
Correct answer: Chains
In the blockchain, 'Chains' are what connect the individual blocks together in a linear and chronological sequence. This connection is established through cryptographic hashing, where each new block contains the hash of the preceding block. This creates an unbroken, tamper-evident link that ensures the integrity and immutability of the entire ledger.
Question 51: A smart contract for a decentralized insurance dApp needs to automatically process a claim based on the real-world occurrence of a hurricane. Since the blockchain cannot directly access external weather data, what component is essential for the smart contract to receive this information securely and reliably?
- A decentralized oracle network to fetch and verify external data. (Correct answer)
- A hard-fork of the main blockchain to include a weather data feed.
- An inter-blockchain communication protocol to query a weather-focused sidechain.
- A state channel to communicate with weather APIs directly.
Correct answer: A decentralized oracle network to fetch and verify external data.
Blockchains are deterministic, isolated systems and cannot natively access off-chain data. A decentralized oracle network serves as a secure bridge, retrieving external data (like weather reports), verifying its accuracy through consensus, and delivering it to the smart contract to trigger its execution.
Question 52: In Ethereum's ERC-721 standard, what does the tokenURI function return?
- The IPFS hash of the token's on-chain image
- A URI pointing to a JSON file describing the NFT's metadata including name, image, and attributes (Correct answer)
- The block number when the token was minted
- The Ethereum address of the token's current owner
Correct answer: A URI pointing to a JSON file describing the NFT's metadata including name, image, and attributes
tokenURI returns a URL (often IPFS or HTTPS) to a JSON metadata file following the ERC-721 metadata standard.
Question 53: Blockchain is a particular kind of.......
- Object
- Table
- Database (Correct answer)
- View
Correct answer: Database
Blockchain is fundamentally a type of distributed database, but with unique characteristics. It stores data in chronological order in 'blocks' that are cryptographically linked together, forming an immutable chain. Unlike traditional databases, it is decentralized, meaning no single entity controls it, and its records are transparent and resistant to alteration.
Question 54: Which characteristic is a primary trade-off when choosing a Delegated Proof of Stake (DPoS) consensus mechanism over a traditional Proof of Stake (PoS) system?
- Increased energy consumption
- Slower transaction speeds
- Greater requirement for specialized mining hardware (Correct answer)
- Reduced number of validators leading to potential centralization
Correct answer: Greater requirement for specialized mining hardware
The primary trade-off of Delegated Proof of Stake (DPoS) is a potential move toward centralization. By concentrating block production in the hands of a small number of elected delegates, DPoS achieves higher speeds and scalability. However, this comes at the cost of the broader decentralization found in traditional PoS systems, where a much larger pool of validators can participate directly.
Question 55: What is the primary compliance concern with 'privacy coins' like Monero or Zcash for US-regulated exchanges?
- High transaction fees
- Slow block confirmation times
- Inability to meet AML/KYC requirements due to transaction obfuscation (Correct answer)
- Incompatibility with ERC-20 standards
Correct answer: Inability to meet AML/KYC requirements due to transaction obfuscation
Privacy coins obfuscate sender, recipient, and transaction amounts, making it extremely difficult for exchanges to comply with AML/KYC monitoring and reporting requirements.
Question 56: Which type of cryptocurrency wallet stores private keys on a device not connected to the internet?
- Exchange wallet
- Hot wallet
- Custodial wallet
- Cold wallet (Correct answer)
Correct answer: Cold wallet
Cold wallets (hardware wallets, paper wallets) keep private keys offline, significantly reducing exposure to online hacking threats.
Question 57: In a DAO (Decentralized Autonomous Organization), what mechanism is most commonly used to prevent token holders from voting with borrowed tokens?
- Multi-signature wallet approval for each vote
- Zero-knowledge proofs verifying token ownership
- Snapshot-based voting where token balances are recorded at a specific block before the proposal (Correct answer)
- Delegated proof of stake consensus
Correct answer: Snapshot-based voting where token balances are recorded at a specific block before the proposal
Snapshot voting records token balances at a specific block height before a proposal is created, preventing vote manipulation through flash loans or late token acquisition.
Question 58: What did they accomplish jointly?
- The facilitation of interbank transmission of messages
- The creation of smart contracts and stable coins
- The first interbank payments without limitations of time zones (Correct answer)
- The launch of wire transfers using cryptography
Correct answer: The first interbank payments without limitations of time zones
The correct answer highlights a key benefit of blockchain and Distributed Ledger Technology (DLT) in finance. By providing a secure, transparent, and immutable ledger, DLT can streamline cross-border payments, eliminating the need for multiple intermediaries and reducing delays caused by different time zones and banking hours. This enables near real-time settlement of interbank transactions globally.
Question 59: In Hyperledger Besu, what does 'IBFT 2.0' refer to?
- Istanbul Byzantine Fault Tolerant consensus, version 2.0 (Correct answer)
- Immutable Blockchain File Transfer protocol
- Integrated Block Formation Technique for private networks
- Internet Blockchain Framework Technology version 2.0
Correct answer: Istanbul Byzantine Fault Tolerant consensus, version 2.0
IBFT 2.0 (Istanbul Byzantine Fault Tolerant) is a consensus algorithm in Hyperledger Besu designed for private Ethereum networks, offering immediate transaction finality.
Question 60: How long does it take to mine a block of Ethereum?
- 10
- 12
- 0 (Correct answer)
- 30
Correct answer: 0
After Ethereum's transition to Proof-of-Stake (known as 'The Merge'), the concept of 'mining' a block in the traditional Proof-of-Work sense no longer applies. Instead, blocks are created and attested by validators at fixed intervals (slots), meaning there is no competitive mining process with a variable 'mining time.' Thus, the time to 'mine' a block is effectively 0 in the old sense, as blocks are now scheduled.
Certified Blockchain Professional (CBCP) Exam
The Certified Blockchain Professional (CBCP) exam validates an individual's foundational knowledge of blockchain technology, including its concepts, principles, and applications.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds