Blockchain Security Training Incident Response and Blockchain Forensics

Question 1

What is the primary objective of blockchain forensics during a security incident investigation?

Accepted Answer

To trace and attribute transactions in order to identify threat actors and support asset recovery

Answer

To shut down the blockchain network immediately

Answer

To rewrite blockchain history and remove malicious transactions

Answer

To decrypt all private keys associated with suspicious wallets

Question 2

Which of the following tools is most commonly used by investigators and law enforcement to trace Bitcoin transactions during a forensic investigation?

Accepted Answer

Chainalysis Reactor

Answer

Metasploit

Answer

Wireshark

Answer

Nessus

Question 3

What does 'chain of custody' mean in the context of a blockchain forensic investigation?

Accepted Answer

The documented process of preserving and tracking digital evidence from collection through legal presentation

Answer

The sequence of blocks linking back to the genesis block

Answer

The consensus mechanism used to validate transactions on the network

Answer

The order in which nodes process and relay incoming transactions

Question 4

When a smart contract exploit is actively occurring, what should be the FIRST step in incident response?

Accepted Answer

Pause or disable the contract if a pause function exists to halt further losses

Answer

Immediately publish full vulnerability details to warn the community

Answer

Contact law enforcement and file a report

Answer

Redeploy the contract immediately with a patched version

Question 5

Which on-chain data element is most critical for tracing stolen cryptocurrency funds after an incident?

Accepted Answer

Transaction hashes and wallet address fund flows

Answer

Block gas limits and miner fee adjustments

Answer

Mining pool difficulty targets

Answer

Geographic distribution of validator nodes

Question 6

In the context of blockchain incident response, what is a 'replay attack'?

Accepted Answer

Re-executing a valid transaction from one blockchain on a forked chain where it is also accepted

Answer

Flooding blockchain nodes with replayed network packets to cause a denial of service

Answer

Repeating failed smart contract calls to drain funds incrementally

Answer

Copying a chain's full transaction history to a test environment for analysis

Question 7

Which NIST publication provides the foundational incident response lifecycle that organizations can adapt for blockchain security incidents?

Accepted Answer

NIST SP 800-61 (Computer Security Incident Handling Guide)

Answer

NIST SP 800-53 (Security and Privacy Controls)

Answer

NIST SP 800-171 (Protecting CUI)

Answer

NIST SP 800-207 (Zero Trust Architecture)