Auditing, Testing, and Monitoring in Blockchain Security BDC Practice Questions (Page 11)

Questions 51–52

1. 51application · medium

   A smart contract team wants to integrate automated security testing into their CI/CD pipeline. Which tool or framework is best suited for this purpose?

   • AA static analysis tool that can be run from the command line and integrated into the build process
   • BA block explorer
   • CA manual code review checklist
   • DA testnet deployment script
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   An auditor is reviewing a smart contract that uses a custom math library. The team is concerned about integer overflow but also wants to minimize gas costs. The contract is written in Solidity 0.8.x. Which recommendation best balances security and gas efficiency?

   • AReplace all arithmetic with the custom library to ensure safety, even though it increases gas costs.
   • BUse the custom library only in functions that handle user input, and use unchecked arithmetic in internal functions.
   • CRely on Solidity 0.8.x's built-in overflow checks and use the custom library only where unchecked arithmetic is proven safe.
   • DDisable the built-in overflow checks globally and rely on the custom library for all arithmetic.
   Reveal Solution Discussion Select an answer first