Common Threats and Blockchain Security Best Practices BBLC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does a phishing attack typically exploit user behavior in a blockchain context?

   • ABy tricking users into revealing their private keys or seed phrases through fake websites or messages.
   • BBy using fake identities to gain voting power in a governance system.
   • CBy exploiting a bug in the consensus algorithm to create conflicting blocks.
   • DBy overwhelming the network with a high volume of transactions to slow down block production.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary goal of the containment phase in a blockchain incident response plan?

   • ATo identify the root cause of the incident.
   • BTo notify law enforcement agencies.
   • CTo restore systems to normal operation.
   • DTo limit the spread and impact of the incident.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a smart contract that has been in production for a year. They want to conduct a security audit to identify any vulnerabilities that may have been introduced over time. The budget is limited. Which approach is the most cost-effective while still providing reasonable assurance?

   • AOnly run an automated scanner and do no manual review.
   • BRun an automated security scanner and then have a single independent auditor review the highest-risk areas.
   • CHire two full audit firms to conduct independent audits in parallel.
   • DSkip the audit because the contract has been running for a year without issues.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the role of a firewall in securing blockchain infrastructure?

   • ATo control incoming and outgoing network traffic based on security rules.
   • BTo encrypt the blockchain data stored on disk.
   • CTo generate private keys for users.
   • DTo validate transactions before they are added to the blockchain.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has a blockchain-based voting system. During an election, a smart contract vulnerability is discovered that could allow an attacker to change votes. The election is ongoing, and the company must decide whether to halt the election or continue. What is the BEST decision?

   • AHalt the election immediately, investigate the vulnerability, and redeploy a patched contract before restarting.
   • BIgnore the vulnerability because the election is almost over.
   • CContinue the election and hope the attacker does not exploit the vulnerability.
   • DContinue the election and manually audit each vote after the election.
   Reveal Solution Discussion Select an answer first