Incident Response and Risk Mitigation BBLC Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which mitigation strategy is specifically designed to reduce the risk of unauthorized transactions by requiring multiple private keys to authorize a single transaction?

   • AMulti-signature wallet
   • BNetwork monitoring
   • CHardware wallet
   • DCode audit
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A DeFi protocol experienced a flash loan attack that exploited a price oracle manipulation vulnerability. The team patched the vulnerability and recovered. During post-incident analysis, the team must decide how to improve the incident response plan. The team has limited resources and must choose one improvement. Which improvement provides the most value?

   • AIncrease the frequency of smart contract audits from annually to quarterly.
   • BAdd a mandatory step to the incident response plan that requires a review of all oracle dependencies and their manipulation resistance before any new protocol is deployed.
   • CCreate a dedicated incident response team that can be activated within 30 minutes of any incident.
   • DDevelop a communication template to inform users about incidents more quickly.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A blockchain network for cross-border payments wants to detect a potential sybil attack where an attacker creates multiple fake nodes to gain influence. The network has a permissioned validator set, but the attack is suspected to involve compromised validator identities. Which detection approach is most effective?

   • AConduct a monthly review of all validator identities and their associated organizations.
   • BMonitor for unusual patterns in validator behavior, such as multiple validators voting identically on all proposals or sudden changes in transaction routing.
   • CIncrease the number of validators required for consensus from 51% to 67%.
   • DMonitor the network's transaction volume and alert when it exceeds a historical average by 20%.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A blockchain-based ticketing platform experienced a denial-of-service (DoS) attack that overwhelmed its nodes with invalid transactions. The attack was mitigated, and the network is back online. The team is now in the lessons-learned phase. What is the most important action to take?

   • ARestore all nodes from backups to ensure they are clean.
   • BDocument the attack timeline, the effectiveness of the response, and specific improvements to the incident response plan.
   • CIncrease the network's transaction throughput capacity to handle future DoS attacks.
   • DNotify all users that the attack occurred and that their data is safe.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which mitigation technique is most effective for identifying and fixing vulnerabilities in smart contracts before they are deployed to the mainnet?

   • ANetwork monitoring
   • BCode audit
   • CMulti-signature wallet
   • DEncryption of private keys
   Reveal Solution Discussion Select an answer first