Incident Response and Risk Mitigation BBLC Practice Questions (Page 11)

Questions 51–54

1. 51application · medium

   A user reports that they clicked a link in a phishing email and entered their private key on a fake wallet website. The user's funds have not been moved yet. What is the most urgent incident response action?

   • AChange the user's password on the exchange account associated with the wallet.
   • BMonitor the compromised wallet for any unauthorized transactions and alert the user if any occur.
   • CImmediately transfer all funds from the compromised wallet to a new wallet with a newly generated private key.
   • DReport the phishing site to the domain registrar to have it taken down.
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   A blockchain-based gaming company operates a private network with a single validator node. The company's monitoring system alerts that the node is producing blocks at an unusually high rate, and the node's operator account has been compromised. The attacker is using the node to create invalid blocks. The company has a backup of the node's data from 24 hours ago. The company must minimize downtime and data loss. What is the BEST course of action?

   • ARotate the operator keys without restoring the backup.
   • BRestore the backup without shutting down the node.
   • CImmediately shut down the compromised node, restore the backup, and rotate the operator keys before bringing the node back online.
   • DKeep the node running to gather more forensic evidence before taking action.
   Reveal Solution Discussion Select an answer first
4. 53expert · hard

   A blockchain gaming company wants to mitigate the risk of a 51% attack on its proof-of-work network. The network has a small hash rate, and the company has a limited budget. The company must choose between increasing the network's hash rate by renting additional mining power or switching to a proof-of-stake consensus mechanism. Which option is the better long-term mitigation?

   • AImplement a monitoring system that alerts when the network's hash rate drops below a certain threshold.
   • BIncrease the block reward to incentivize more miners to join the network.
   • CRent additional mining power to increase the network's hash rate above the attack threshold.
   • DSwitch to proof-of-stake, which makes a 51% attack economically impractical because an attacker would need to acquire a majority of the staked tokens.
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   What is the primary purpose of post-incident analysis in blockchain incident response?

   • ATo restore the blockchain network to its pre-incident state
   • BTo immediately delete all evidence of the incident
   • CTo document lessons learned and improve future incident response plans
   • DTo assign blame to individuals involved in the incident
   Reveal Solution Discussion Select an answer first