CBSA - Certified Blockchain Solution Architect Solution Architecture Design Questions and Answers — Questions and Answers
Question 1: A solution architect is designing a system for managing academic credentials. The system must allow universities to issue digital diplomas (Verifiable Credentials) to students, who can then present them to potential employers for verification. A core requirement is that students must have full control over their own identity data, without relying on a central identity provider. Which architectural model is best suited for this requirement?
- A federated identity model using SAML assertions.
- A centralized identity model with a master user database.
- A self-sovereign identity (SSI) model using Decentralized Identifiers (DIDs). (Correct answer)
- A platform-based identity model managed by a social media provider.
Correct answer: A self-sovereign identity (SSI) model using Decentralized Identifiers (DIDs).
A self-sovereign identity (SSI) model is designed to give individuals control over their digital identities. Using Decentralized Identifiers (DIDs), users can create and manage their own identifiers without depending on a centralized registry or identity provider. This aligns perfectly with the requirement for students to have full control over their credentials. The other models all rely on a third-party or centralized authority to manage identity, which contradicts the core requirement.
Question 2: A consortium is building a blockchain solution to track sensitive pharmaceutical data. To reduce costs and improve performance, large data files, such as research reports and imagery, will be stored off-chain. However, the integrity of this off-chain data must be verifiable on-chain. What is the most effective architectural pattern to achieve this?
- Store the large files directly on the blockchain in a series of smaller transactions.
- Use an outbound oracle to periodically push the file contents to an external monitoring service.
- Store a hash of the off-chain file on the blockchain alongside a pointer (like a URI or IPFS CID) to the file's location. (Correct answer)
- Encrypt the files and store them in a centralized database, with the encryption key stored in a smart contract.
Correct answer: Store a hash of the off-chain file on the blockchain alongside a pointer (like a URI or IPFS CID) to the file's location.
Storing a cryptographic hash of the off-chain data on the blockchain is a standard and effective pattern. This approach leverages the immutability of the blockchain to guarantee the integrity of the off-chain data. Anyone can later re-calculate the hash of the off-chain file and compare it to the hash stored on-chain to verify that the file has not been tampered with. Storing large files on-chain is inefficient and expensive. An outbound oracle sends data from the blockchain outwards, and storing the encryption key on-chain without the hash doesn't verify the file's integrity.
Question 3: A solution architect is designing a high-frequency trading application for a small, fixed group of financial institutions. The application requires extremely fast, low-cost transactions and privacy between the participants. The final settlement of net balances must be recorded on the main public blockchain. Which Layer-2 scaling solution is most appropriate for this scenario?
- Sidechain
- State Channel (Correct answer)
- Plasma Chain
- ZK-Rollup
Correct answer: State Channel
State channels are ideal for scenarios with a fixed set of participants who need to conduct a high number of transactions off-chain privately and with instant finality. Participants transact directly with each other off-chain, and only the initial channel opening and final closing/settlement transactions are recorded on the main blockchain. This perfectly matches the requirements for speed, cost, privacy, and final settlement. Sidechains involve a separate blockchain and transactions are public on that chain, while Rollups batch transactions but may not be as suitable for this specific high-frequency, private interaction model.
Question 4: An enterprise is planning to integrate its existing legacy ERP system with a new private blockchain network for supply chain finance. The ERP system needs to trigger smart contract functions based on events like 'invoice approved', and smart contracts need to update the ERP system when 'payment is settled'. Which architectural component is essential to bridge the gap between the off-chain legacy system and the on-chain smart contracts?
- A cross-chain bridge to another ledger.
- A decentralized storage network like IPFS.
- A set of middleware services, often referred to as a blockchain oracle. (Correct answer)
- A dedicated Proof-of-Authority consensus node.
Correct answer: A set of middleware services, often referred to as a blockchain oracle.
Blockchains are deterministic, closed systems and cannot directly access off-chain data or APIs. An oracle is a middleware service that acts as a secure bridge, fetching external data for smart contracts (inbound) and sending data from smart contracts to external systems (outbound). In this scenario, an oracle is required to listen for events from the ERP system and translate them into blockchain transactions, and vice-versa.
Question 5: A consortium of shipping companies wants to build an interoperable blockchain network. Each company has its own private blockchain (e.g., one on Hyperledger Fabric, another on Corda). They need a way to transfer digital assets representing shipping containers between their distinct, heterogeneous chains. Which architectural pattern is specifically designed to facilitate this type of cross-chain communication and asset transfer?
- A notary scheme where a trusted party validates cross-chain transactions.
- A tokenization pattern using a single, universal token standard.
- A data sharding strategy to partition the network state.
- A relay or sidechain pattern that connects the independent chains. (Correct answer)
Correct answer: A relay or sidechain pattern that connects the independent chains.
Relay and sidechain patterns are primary mechanisms for achieving blockchain interoperability. A relay system involves components that monitor events on one chain and 'relay' proofs of those events to another chain, enabling cross-chain logic. Sidechains are independent blockchains pegged to a main chain, allowing assets to be moved between them. Both approaches solve the problem of connecting heterogeneous ledgers. A notary scheme introduces centralization, tokenization doesn't solve the transfer problem itself, and sharding is a scalability solution for a single blockchain.
Question 6: When designing a solution that represents real-world assets (like real estate or company shares) on a blockchain, a solution architect uses a specific design pattern. This pattern involves creating a digital representation of an asset within a smart contract, defining its properties, ownership, and transfer rules according to a standard like ERC-20 or ERC-721. What is this fundamental design pattern called?
- Oracle Pattern
- Proxy Pattern
- Factory Pattern
- Tokenization Pattern (Correct answer)
Correct answer: Tokenization Pattern
The process of creating and managing digital representations (tokens) of physical or logical assets on a blockchain is called the Tokenization Pattern. This pattern uses a smart contract to define the asset's attributes and govern its lifecycle, including issuance, transfer, and redemption. The Oracle pattern is for off-chain data, the Proxy pattern is for contract upgradability, and the Factory pattern is for deploying new contracts.
CBSA - Certified Blockchain Solution Architect Solution Architecture Design Questions and Answers
A solution architect is designing a system for managing academic credentials.
The system must allow universities to issue digital diplomas (Verifiable Credentials) to students, who can then present them to potential employers for verification.
A core requirement is that students must have full control over their own identity data, without relying on a central identity provider.
Which architectural model is best suited for this requirement?