Incident Response and Risk Mitigation BDC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the context of incident response for blockchain and DeFi systems, which sequence correctly represents the standard incident response lifecycle phases?

   • APreparation, Containment, Detection, Eradication, Recovery, Analysis
   • BContainment, Eradication, Detection, Preparation, Recovery, Lessons Learned
   • CDetection, Recovery, Preparation, Analysis, Eradication, Containment
   • DPreparation, Detection and Analysis, Containment, Eradication, Recovery, Lessons Learned
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A DeFi protocol wants to monitor for oracle manipulation attacks. Which monitoring approach is most effective?

   • ACheck the oracle's price only once a day.
   • BTrack price deviations between the protocol's oracle and multiple independent reference feeds.
   • CRely on the oracle provider's uptime status page.
   • DMonitor the protocol's social media mentions for the word 'oracle'.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool or technique is commonly used to trace the movement of funds on a public blockchain during forensic analysis?

   • ADisk imaging software
   • BBlockchain explorer
   • CPacket sniffer
   • DMemory forensics tool
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   During a security incident on a DeFi protocol, the team identifies a malicious contract that is draining funds. The protocol has a governance token and a timelock. What is the fastest way to contain the incident?

   • APropose a governance vote to upgrade the contract.
   • BContact the blockchain validator to revert the malicious transactions.
   • CWait for the attacker to run out of gas.
   • DUse the protocol's emergency pause mechanism if one exists.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a common containment strategy for a DeFi protocol that has been exploited?

   • AIncreasing the gas price for all transactions to slow down the attacker
   • BPausing the protocol's smart contracts to prevent further transactions
   • CDeploying a new version of the protocol without any pause mechanism
   • DEncouraging users to withdraw their funds immediately
   Reveal Solution Discussion Select an answer first