Incident Response and Risk Mitigation BBLC Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is the primary objective of the recovery phase in blockchain incident response?

   • ATo restore blockchain operations and data integrity while ensuring business continuity
   • BTo delete all transaction history
   • CTo permanently shut down the blockchain network
   • DTo identify the attacker and press charges
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A blockchain network for digital identity verification wants to detect a potential credential stuffing attack where attackers use stolen passwords to access user accounts. The network uses a smart contract to manage authentication. Which monitoring approach would best detect this attack?

   • AMonitor the total number of active user sessions and alert when it drops below a historical average.
   • BConduct a weekly review of all authentication logs to identify any suspicious patterns.
   • CMonitor for a high volume of failed authentication attempts from a single IP address or a distributed set of IP addresses within a short time window.
   • DMonitor the smart contract's gas usage and alert when it exceeds a certain threshold.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A company's blockchain network experienced a major security incident that caused data inconsistency across nodes. The company has restored the network, but some nodes have different transaction histories. The company must ensure business continuity while maintaining data integrity. What is the BEST approach?

   • AResume operations immediately and let the network resolve inconsistencies over time.
   • BIdentify the correct chain state by reaching consensus among nodes and reconcile any discrepancies before resuming full operations.
   • CUse the node with the most transactions as the authoritative source without verification.
   • DShut down the network permanently to prevent future incidents.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which blockchain-specific threat is most commonly triggered by a user clicking a malicious link that leads to a fake wallet website, resulting in the theft of their private keys?

   • ASmart contract exploit
   • B51% attack
   • CDistributed denial-of-service (DDoS) attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   When conducting a risk assessment for a blockchain system, which factor is most important to consider when prioritizing vulnerabilities for mitigation?

   • AThe age of the blockchain network
   • BThe likelihood of the vulnerability being exploited and the potential impact on the organization
   • CThe market price of the cryptocurrency associated with the blockchain
   • DThe number of lines of code in the smart contract
   Reveal Solution Discussion Select an answer first