Testing, Debugging, and Auditing Contracts BDC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the core principle of Test-Driven Development (TDD)?

   • AWrite tests that are independent of the implementation details.
   • BWrite the implementation code first, then write tests to verify it.
   • CWrite a failing test first, then write the minimum code to make it pass.
   • DWrite tests only after the contract is deployed to the mainnet.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A developer is using TDD to build a `mint` function that should only be callable by the owner. The developer has written a test that expects a non-owner to be unable to mint. The test currently fails because the `mint` function does not exist yet. What should the developer do next?

   • ARun a static analysis tool to check if the function is missing.
   • BImplement the `mint` function with an `onlyOwner` modifier and run the test again.
   • CModify the test to expect success for non-owners so it passes.
   • DWrite another test for the owner case before implementing the function.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is preparing for a security audit and wants to ensure the audit is effective. The development team has already run static analysis tools and fixed all reported issues. What is the most important additional step to prepare for a manual audit?

   • AOnly provide the compiled bytecode to the auditors to avoid revealing the source code.
   • BDeploy the contract to the mainnet before the audit to ensure it is tested in a real environment.
   • CMinimize the amount of documentation provided to avoid biasing the auditors.
   • DProvide the auditors with a clear specification of the intended behavior and any known edge cases.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of static analysis tools like Slither in smart contract security?

   • ATo automatically detect potential vulnerabilities and code quality issues without executing the code.
   • BTo deploy the contract to the mainnet.
   • CTo execute the contract on a testnet and observe its behavior.
   • DTo generate documentation for the contract.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a best practice to prevent access control issues in smart contracts?

   • AAvoid using any access control mechanisms.
   • BUse `tx.origin` for authentication.
   • CMake all functions public to ensure transparency.
   • DUse a modifier like `onlyOwner` to restrict sensitive functions to authorized users.
   Reveal Solution Discussion Select an answer first