Security & Access Control Flashcards
7 cards from real CBDH practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Access Control flashcards as text
What is stored on the channel ledger for a private data collection write?
Answer: Only a hash of the private data
Only hashes go to the channel ledger; real data stays in members' side databases.
What does memberOnlyRead set to true in a collection definition do?
Answer: Restricts chaincode invocation to collection members only for reads by clients
memberOnlyRead requires that clients reading the data belong to a collection member organization.
Which ClientIdentity chaincode API retrieves a custom attribute from the caller's certificate for ABAC?
Answer: GetAttributeValue
ClientIdentity.GetAttributeValue reads attributes embedded in the X.509 certificate.
Why should chaincode avoid using random numbers or local system time to compute state changes?
Answer: Different endorsers would produce different results, causing endorsement mismatch
Chaincode must be deterministic so endorsing peers return identical read/write sets.
How can a collection require specific organizations to endorse writes to private data?
Answer: By a collection-level endorsement policy
Collections can define their own endorsementPolicy overriding the chaincode-level one.
Why should sensitive inputs be passed in the transient field of a proposal?
Answer: It keeps them out of the transaction submitted to the ordering service
Transient data is not included in the transaction sent to ordering, so orderers never see it.
Which chaincode stub-related call returns the MSP ID of the invoking client's organization?
Answer: GetMSPID on the ClientIdentity
ClientIdentity.GetMSPID returns the caller's organization MSP ID, commonly used for ownership checks.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- blockchaintrainingalliance.com — Test delivery, passing score, score release, test dates, fees, exam format, time limit · verified Oct 2026