CBDH Identity & Certificate Management 1 — Questions and Answers
Question 1: What is the primary role of the Membership Service Provider (MSP) in Hyperledger Fabric?
- To manage transaction throughput across channels
- To define the rules for validating identities and determining member privileges (Correct answer)
- To store chaincode in the distributed ledger
- To manage peer node communication protocols
Correct answer: To define the rules for validating identities and determining member privileges
MSP defines the cryptographic material and rules used to validate identities and determine the privileges of members within a Fabric network.
Question 2: Which certificate format does Hyperledger Fabric use for identity management?
- PEM-encoded X.509 certificates (Correct answer)
- PKCS#12 certificates
- DER-encoded RSA certificates
- JWT tokens
Correct answer: PEM-encoded X.509 certificates
Hyperledger Fabric uses PEM-encoded X.509 certificates as the standard format for representing digital identities across the network.
Question 3: What is the function of Fabric CA in a Hyperledger Fabric network?
- To execute smart contracts on behalf of clients
- To issue and manage X.509 certificates for network identities (Correct answer)
- To validate transaction ordering sequences
- To store the world state database
Correct answer: To issue and manage X.509 certificates for network identities
Fabric CA provides certificate issuance, renewal, and revocation services for all identities participating in the Fabric network.
Question 4: Which command is used to obtain an enrollment certificate from Hyperledger Fabric CA?
- fabric-ca-client register
- fabric-ca-client enroll (Correct answer)
- fabric-ca-client join
- fabric-ca-client identity add
Correct answer: fabric-ca-client enroll
The `fabric-ca-client enroll` command retrieves an enrollment certificate (ECert) from the Fabric CA for a previously registered identity.
Question 5: What is an enrollment certificate (ECert) in Hyperledger Fabric?
- A certificate used only for TLS communication between nodes
- A long-term identity certificate issued to network participants (Correct answer)
- A temporary session token for transaction signing
- A certificate stored only on the orderer node
Correct answer: A long-term identity certificate issued to network participants
An ECert is a long-term identity certificate issued by the enrollment CA that establishes the permanent identity of a user or node in the Fabric network.
Question 6: What is the purpose of the TLS CA in Hyperledger Fabric?
- To issue certificates for user enrollment and business identity
- To provide certificates for securing communication channels between nodes (Correct answer)
- To validate chaincode endorsement policies
- To manage the gossip protocol's peer discovery credentials
Correct answer: To provide certificates for securing communication channels between nodes
The TLS CA issues certificates used to secure transport-layer communications between Fabric components such as peers, orderers, and clients.
Question 7: Which cryptographic algorithm is used by default for key generation in Hyperledger Fabric's BCCSP?
- RSA-2048
- ECDSA with curve P-256 (Correct answer)
- DSA-1024
- Ed25519
Correct answer: ECDSA with curve P-256
Hyperledger Fabric uses ECDSA (Elliptic Curve Digital Signature Algorithm) with the P-256 curve as the default for key generation and transaction signing.
CBDH Identity & Certificate Management 1
What is the primary role of the Membership Service Provider (MSP) in Hyperledger Fabric?