Incident Response and Risk Mitigation BBLC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A blockchain exchange has implemented monitoring tools that alert on unusual transaction volumes. The monitoring system flags a sudden spike in transactions to a newly deployed smart contract. The exchange's security team must determine if this is an attack or normal activity. What is the BEST next step?

   • AIgnore the alert because the contract was recently deployed.
   • BImmediately pause all transactions to the contract without investigation.
   • CInvestigate the smart contract's code and the source of the transactions to determine if the spike is malicious.
   • DIncrease the alert threshold to reduce false positives.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary function of an alerting tool in a blockchain monitoring system?

   • ATo replace the need for human incident responders
   • BTo notify security personnel when predefined thresholds or anomalies are detected
   • CTo encrypt all blockchain data
   • DTo automatically reverse malicious transactions
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A permissioned blockchain network detects that a malicious smart contract has been deployed by a compromised admin account. The contract is actively draining funds from user accounts. The network has a governance mechanism that can pause the entire network, but this would halt all legitimate business operations. What is the best containment strategy?

   • AIgnore the malicious contract and focus on monitoring user accounts for unauthorized transactions.
   • BFreeze the compromised admin account and revoke its deployment permissions, then identify and block the malicious contract's address at the network level.
   • CPause the entire network immediately to stop all transactions, then investigate the malicious contract.
   • DDeploy a new smart contract that attempts to drain funds back from the malicious contract.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which type of tool is specifically used to detect anomalies in blockchain transactions, such as unusually large transfers or rapid changes in transaction volume?

   • ASmart contract compiler
   • BPrivate key generator
   • CBlock explorer
   • DNetwork monitoring and alerting tools
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A startup is launching a blockchain-based voting system and wants to reduce the risk of a single compromised administrator being able to alter election results. The system uses a permissioned blockchain with multiple organizational nodes. Which mitigation strategy would BEST address this risk?

   • AConduct a one-time code audit of the voting smart contract before launch.
   • BRequire multiple administrators to approve any change to the voting smart contract using a multi-signature wallet.
   • CUse a single administrator account with a strong password and two-factor authentication.
   • DDeploy the voting system on a public blockchain to increase transparency.
   Reveal Solution Discussion Select an answer first