Incident Response and Risk Mitigation BBLC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A cryptocurrency exchange notices a sudden increase in the number of transactions being rejected by its nodes, and several large transfers have been delayed. The exchange's monitoring dashboard shows that a single mining pool has just exceeded 51% of the network's hash rate. What is the MOST IMMEDIATE risk to the exchange, and what should the incident response team do first?

   • ARisk of double-spending; the team should halt deposits and withdrawals until the network threat is assessed.
   • BRisk of private key theft; the team should rotate all exchange keys immediately.
   • CRisk of network partitioning; the team should increase the number of nodes in other regions.
   • DRisk of smart contract exploitation; the team should audit all deployed contracts immediately.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A blockchain-based supply chain company detects that an attacker has exploited a vulnerability in a smart contract used for inventory tracking, allowing unauthorized transfers of digital tokens. The company's incident response team has already confirmed the exploit and isolated the affected smart contract by pausing its execution. According to the incident response lifecycle, what should the team do NEXT?

   • ASkip eradication and conduct lessons learned to update the incident response plan immediately.
   • BIncrease network monitoring to detect further anomalies before taking any other action.
   • CProceed to eradication by removing the vulnerable contract code and deploying a patched version after testing.
   • DMove directly to recovery by restoring all transactions from the last known good backup.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A blockchain-based healthcare company is conducting a risk assessment. They have identified that their patient data smart contract has a critical vulnerability, but the cost to fix it is high. They also have a lower-severity vulnerability in a billing contract that is cheaper to fix. The company has a limited budget. What is the BEST approach?

   • APrioritize fixing the critical vulnerability first, even if it costs more, because the impact is higher.
   • BFix both vulnerabilities at the same time regardless of budget.
   • CFix the cheaper billing contract first to stay within budget.
   • DIgnore the critical vulnerability because the cost is too high.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   After a security incident, a company's blockchain network is back online, but some nodes are still syncing and the data is not yet consistent across all nodes. What is the MOST IMPORTANT step to ensure business continuity?

   • AVerify that all nodes have reached consensus and are synchronized before resuming normal operations.
   • BOnly allow read-only access until all nodes are synced.
   • CResume normal operations immediately to minimize downtime.
   • DShut down the network permanently to prevent future attacks.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which output is a typical result of a post-incident analysis in a blockchain context?

   • AA list of all transactions that occurred during the incident
   • BA public announcement of the incident
   • CA backup of the blockchain database
   • DAn updated incident response plan with new detection rules
   Reveal Solution Discussion Select an answer first