CBDH Security & Access Control 2

Question 1

Which Hyperledger Fabric component issues enrollment certificates to network participants?

Accepted Answer

Fabric CA

Answer

Fabric CA registers identities and issues X.509 enrollment certificates.

Question 2

What is the purpose of NodeOUs in an MSP configuration?

Accepted Answer

Classifying identities as client, peer, admin, or orderer by the OU in their certificate

Answer

NodeOUs let the MSP derive roles from the OU field of an identity's certificate.

Question 3

Which MSP type is defined on a peer or orderer node and is visible only to that node?

Accepted Answer

Local MSP

Answer

A local MSP is defined on a node or client and is not shared on the channel.

Question 4

How does a Fabric channel learn that a certificate has been revoked?

Accepted Answer

A certificate revocation list is included in the channel MSP configuration

Answer

Revoked certificates are published via a CRL in the MSP configuration on the channel.

Question 5

What does setting clientAuthRequired to true on a peer's TLS configuration enable?

Accepted Answer

Mutual TLS, requiring clients to present a valid certificate

Answer

With clientAuthRequired, the server verifies client certificates, giving mutual TLS.

CBDH - Certified Blockchain Developer Hyperledger Practice Test