Incident Response and Risk Mitigation BDC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security analyst is investigating a smart contract exploit. The analyst has identified the attack transaction and wants to understand the sequence of internal calls made by the contract. Which tool or method is most appropriate for this analysis?

   • AAnalyze the contract's bytecode to decompile it.
   • BCheck the contract's event logs for any emitted events.
   • CUse a block explorer that provides a transaction trace showing internal calls and state changes.
   • DReview the contract's source code to identify potential vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which monitoring approach is specifically designed to detect oracle manipulation in a DeFi protocol?

   • AChecking the block gas limit for unusually high values
   • BMonitoring the number of active users on the protocol's frontend
   • CReviewing the protocol's smart contract code for syntax errors
   • DTracking sudden, abnormal price deviations from multiple independent data sources
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   During a security incident in a DeFi protocol, what is the primary goal of stakeholder communication?

   • ATo provide timely and accurate information to reduce uncertainty and maintain trust
   • BTo provide a detailed technical analysis of the attack vector
   • CTo shift blame to third-party vendors
   • DTo hide the incident until it is fully resolved
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A blockchain security team is reviewing its incident response plan. They want to ensure they can detect a flash loan attack early. Which phase of the incident response lifecycle should they focus on?

   • ARecovery and lessons learned
   • BPreparation and detection
   • CContainment and eradication
   • DPost-incident communication
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A DeFi protocol has suffered a governance attack that drained a portion of its treasury. The team needs to communicate with stakeholders while complying with relevant regulations. What is the most appropriate first communication step?

   • APublish a transparent post-mortem on the protocol's official channels, including the timeline and affected assets.
   • BRemain silent until the attacker is identified and funds are recovered.
   • CBlame the governance token holders for approving the malicious proposal.
   • DOnly inform large institutional investors privately.
   Reveal Solution Discussion Select an answer first