Practice Test GeeksCBDH - Certified Blockchain Developer Hyperledger Practice Test
← All CBDH Flashcard Decks

Security & Access Control Flashcards

7 cards from real CBDH practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Access Control flashcards as text

  1. Which Hyperledger Fabric component issues enrollment certificates to network participants?

    Answer: Fabric CA

    Fabric CA registers identities and issues X.509 enrollment certificates.

  2. What is the purpose of NodeOUs in an MSP configuration?

    Answer: Classifying identities as client, peer, admin, or orderer by the OU in their certificate

    NodeOUs let the MSP derive roles from the OU field of an identity's certificate.

  3. Which MSP type is defined on a peer or orderer node and is visible only to that node?

    Answer: Local MSP

    A local MSP is defined on a node or client and is not shared on the channel.

  4. How does a Fabric channel learn that a certificate has been revoked?

    Answer: A certificate revocation list is included in the channel MSP configuration

    Revoked certificates are published via a CRL in the MSP configuration on the channel.

  5. What does setting clientAuthRequired to true on a peer's TLS configuration enable?

    Answer: Mutual TLS, requiring clients to present a valid certificate

    With clientAuthRequired, the server verifies client certificates, giving mutual TLS.

  6. Where can a Fabric peer's signing private key be protected against extraction?

    Answer: In a Hardware Security Module accessed via PKCS#11

    Fabric's BCCSP supports PKCS#11 so keys can live in an HSM.

  7. Which Fabric feature provides unlinkable, anonymous transaction signing using zero-knowledge proofs?

    Answer: Idemix

    Idemix issues anonymous credentials whose use cannot be linked across transactions.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. blockchaintrainingalliance.com — Test delivery, passing score, score release, test dates, fees, exam format, time limit · verified Oct 2026