Smart Contract Requirements and Architecture BBLC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A real-estate tokenization platform wants to allow property owners to list their properties and investors to purchase fractional ownership. The business team specifies that only verified owners can list properties, and the platform wants to minimize transaction costs for investors. Which requirement should be documented as a non-functional requirement?

   • AThe contract must store the property owner's address and the property ID.
   • BThe contract should minimize gas costs for frequent purchase transactions.
   • CInvestors must be able to purchase fractional ownership in a single transaction.
   • DOnly verified owners can call the listProperty function.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A team is building a smart contract that handles time-sensitive auctions. The contract must prevent bids after the auction ends and ensure that the highest bidder can claim the item. The team is concerned about front-running attacks. Which security measure is most effective in mitigating front-running?

   • AUse a commit-reveal scheme where bidders submit a hash of their bid, then reveal it after the bidding period ends.
   • BUse a longer bidding period to reduce the chance of front-running.
   • CRely on the block timestamp to determine the winner.
   • DMake the bid function private so that only whitelisted addresses can bid.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   During requirements elicitation for a smart contract that manages a loyalty rewards program, a business stakeholder states that the contract must ensure that points are awarded only to verified customers and that the system must be available 24/7. Which classification correctly separates these two requirements?

   • ABoth are non-functional requirements because they are constraints on the system.
   • BThe 24/7 availability is a functional requirement; the verified-customer rule is a non-functional requirement.
   • CThe verified-customer rule is a functional requirement; the 24/7 availability is a non-functional requirement.
   • DBoth are functional requirements because they describe what the system must do.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In Solidity, which data structure is most appropriate for storing a list of unique wallet addresses that are allowed to participate in a token sale?

   • AA mapping from address to bool
   • BA string containing comma-separated addresses
   • CA struct with a single address field
   • DAn array of addresses
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team has developed a smart contract for a decentralized exchange (DEX). Before deploying, they want to ensure that the contract handles unexpected inputs and malicious actors correctly. Which testing approach should they include in their validation strategy?

   • ARely on a third-party audit without running any tests yourself.
   • BOnly test the happy path with normal inputs to ensure the core functionality works.
   • CWrite fuzz tests that generate random and edge-case inputs to uncover unexpected behavior, in addition to unit tests.
   • DDeploy to mainnet and rely on bug bounties to find issues.
   Reveal Solution Discussion Select an answer first