Incident Response and Risk Mitigation BBLC Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which blockchain-specific threat occurs when an attacker gains control of more than half of the network's hash rate or staking power, allowing them to double-spend or prevent new transactions from being confirmed?

   • ASmart contract exploit
   • B51% attack
   • CPhishing attack
   • DSybil attack
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A blockchain-based land registry suffered a ransomware attack that encrypted the nodes' local databases. The immutable ledger on the network is intact, but the nodes' local indexes and cache layers are corrupted. The registry must resume operations quickly. What is the most appropriate recovery step?

   • ARestore the nodes' local databases from the most recent full backup, even if the backup is several days old.
   • BPay the ransom to obtain the decryption keys and then restore the local databases.
   • CDeclare the network compromised and create a new blockchain from scratch with all nodes re-initialized.
   • DRebuild the affected nodes by re-syncing them from the immutable ledger, then restore the local indexes from the last known-good backup.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which activity is most directly associated with ensuring business continuity during the recovery phase of a blockchain incident?

   • AUpdating firewall rules
   • BRevoking compromised certificates
   • CConducting a post-mortem meeting
   • DRestoring services from backups to minimize downtime
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company runs a smart contract that handles large payments. They want to reduce the risk of a bug in the contract causing a loss of funds. Which combination of mitigation strategies would be MOST effective?

   • AConduct a thorough code audit and implement a multi-signature wallet for contract administration.
   • BOnly use network monitoring and alerting tools.
   • CDeploy the contract without an audit to save time and rely on monitoring.
   • DUse a single administrator key and change it frequently.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An organization runs a private Ethereum network for internal asset tracking. The security team wants to detect a potential 51% attack or a malicious node that is trying to fork the network. Which monitoring approach would be MOST effective?

   • AReview the transaction history of all wallets for unusual transfers.
   • BTrack the hash rate distribution and the number of blocks produced by each node in the network.
   • CMonitor the CPU usage of each node to detect mining activity.
   • DCheck the number of active users on the network dashboard.
   Reveal Solution Discussion Select an answer first