CBDH Identity & Certificate Management 3

Question 1

What is Idemix (Identity Mixer) in Hyperledger Fabric?

Accepted Answer

A privacy-preserving credential scheme that allows anonymous transactions

Answer

A tool for generating MSP configurations automatically

Answer

A consensus mechanism for private data collections

Answer

A TLS library for securing peer-to-peer communication

Question 2

What is an intermediate CA in Hyperledger Fabric?

Accepted Answer

A CA that is signed by a root CA and can issue certificates to end entities

Answer

A CA that only signs TLS certificates for orderer nodes

Answer

A CA used exclusively for ordering service bootstrapping

Answer

A temporary CA used only during initial network setup

Question 3

How is a client's identity accessed within Hyperledger Fabric chaincode?

Accepted Answer

Using the ClientIdentity object from the chaincode shim package

Answer

By querying the world state ledger directly for identity records

Answer

By reading from the channel MSP configuration stored on the peer

Answer

By calling the orderer's identity verification endpoint

Question 4

What is the BCCSP in Hyperledger Fabric?

Accepted Answer

Blockchain Cryptographic Service Provider, which handles cryptographic operations

Answer

Blockchain Consensus and Communication Security Protocol

Answer

Basic Channel Communication and Security Proxy layer

Answer

Blockchain Certificate and Channel Security Policy framework

Question 5

What happens to a Hyperledger Fabric identity when its certificate is added to a Certificate Revocation List (CRL)?

Accepted Answer

The identity is revoked and can no longer participate in any network operations

Answer

The identity can still transact but cannot install or instantiate chaincode

Answer

The identity must re-enroll with a different affiliation to regain access

Answer

The identity's transactions are queued until the revocation period expires

Question 6

What is the purpose of the `keystore` folder in a Hyperledger Fabric MSP directory?

Accepted Answer

To store the private key corresponding to the entity's signing certificate

Answer

To store peer TLS root certificates for channel communication

Answer

To cache recently used public keys from other organizations

Answer

To hold backup copies of the CA root certificates

Question 7

In Hyperledger Fabric, which MSP component stores the trusted root CA certificates used to validate identities from an organization?

Accepted Answer

cacerts

Answer

signcerts

Answer

keystore

Answer

tlscacerts