Incident Response and Risk Mitigation BBLC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company discovers that a smart contract has been exploited and the attacker is draining funds. The contract has an emergency pause function that can be called by the contract owner. What is the BEST immediate action?

   • ATransfer all remaining funds to a new contract immediately.
   • BWait for the attacker to stop and then analyze the damage.
   • CCall the emergency pause function to halt the contract's operations.
   • DDelete the contract from the blockchain.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company's blockchain node has been compromised by malware that is attempting to exfiltrate the private keys stored in the node's wallet. The incident response team has confirmed the compromise. Which containment measure should be taken FIRST?

   • ADelete the malware from the node and restart the node.
   • BUpdate the node's antivirus software and run a full scan.
   • CNotify the blockchain network and ask them to reverse any transactions.
   • DDisconnect the node from the network and move the private keys to a hardware wallet.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A blockchain network administrator wants to detect a smart contract exploit as early as possible. Which monitoring tool or technique would be MOST effective?

   • AReview the smart contract code manually once a month.
   • BMonitor the price of the associated cryptocurrency.
   • CSet up real-time alerts for unusual transaction patterns, such as a sudden large number of calls to a specific contract.
   • DWait for users to report issues.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a blockchain risk assessment, what is the primary purpose of identifying and prioritizing blockchain assets?

   • ATo identify which assets are most vulnerable to phishing attacks specifically
   • BTo comply with regulatory requirements that mandate a specific asset inventory format
   • CTo determine which assets are most critical to the organization and allocate mitigation resources accordingly
   • DTo ensure all assets receive the same level of security controls regardless of their importance
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An employee at a blockchain company receives an email that appears to be from the company's CEO, asking the employee to urgently transfer cryptocurrency to a new wallet address for a business deal. The employee notices the email domain is slightly misspelled. What type of threat is this, and what should the employee do?

   • AA distributed denial-of-service (DDoS) attack; the employee should increase network bandwidth.
   • BA smart contract exploit; the employee should check the contract's code.
   • CPhishing; the employee should report the email to the security team and not transfer any funds.
   • DA 51% attack; the employee should verify the transaction on the blockchain.
   Reveal Solution Discussion Select an answer first