CBDH Identity & Certificate Management 2

Question 1

Which tool is commonly used to generate cryptographic material (certificates and keys) for a Hyperledger Fabric network?

Accepted Answer

cryptogen

Answer

keytool

Answer

openssl-fabric

Answer

fabric-keygen

Question 2

What is the key difference between a local MSP and a channel MSP in Hyperledger Fabric?

Accepted Answer

Local MSP defines identity at the node level, while channel MSP defines membership rules for a specific channel

Answer

Local MSP is for ordering nodes only, while channel MSP is for endorsement peers only

Answer

Local MSP handles TLS certificates, while channel MSP handles enrollment certificates

Answer

There is no difference; they reference the same configuration

Question 3

What does CRL stand for in Hyperledger Fabric identity management?

Accepted Answer

Certificate Revocation List

Answer

Certificate Rotation List

Answer

Channel Registration Log

Answer

Cryptographic Reference Library

Question 4

What is the purpose of the `signcerts` folder within an MSP directory structure?

Accepted Answer

To store the entity's own signing certificate used for identity

Answer

To store the organization's CA root certificates

Answer

To store TLS certificates for secure communication

Answer

To store admin certificates for the organization

Question 5

What is the role of the `admincerts` folder in a Hyperledger Fabric MSP?

Accepted Answer

It contains certificates of identities with administrative privileges for the organization

Answer

It stores certificates of other organizations' administrators

Answer

It stores the orderer's admin certificate exclusively

Answer

It holds the CA signing certificate for verification

Question 6

Why must an identity be registered before it can be enrolled in Hyperledger Fabric CA?

Accepted Answer

Registration creates a record of the identity in the CA database before credentials can be issued

Answer

Registration initializes the peer node's ledger state

Answer

Registration submits a transaction to the ordering service

Answer

Registration installs the required chaincode on the peer

Question 7

What is an affiliation in Hyperledger Fabric CA?

Accepted Answer

An organizational hierarchy used to associate identities with specific departments or groups

Answer

A peer grouping used for gossip communication optimization

Answer

A channel configuration parameter for member policies

Answer

A smart contract deployment scope restricting execution