CBSA Security & Compliance 2

Question 1

Which cryptographic technique allows a party to prove knowledge of a secret without revealing the secret itself, commonly used in blockchain privacy solutions?

Accepted Answer

Zero-knowledge proofs

Answer

Zero-knowledge proofs enable one party to prove to another that a statement is true without conveying any additional information beyond the validity of the statement.

Question 2

In a permissioned blockchain, which access control model assigns permissions based on a user's role within the organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions to roles rather than individuals, and users are granted permissions by being assigned to appropriate roles.

Question 3

What is the primary purpose of a Certificate Revocation List (CRL) in a blockchain PKI infrastructure?

Accepted Answer

To enumerate certificates that have been invalidated before expiry

Answer

A CRL is a list maintained by a Certificate Authority that contains certificates which have been revoked and should no longer be trusted.

Question 4

Which Hyperledger Fabric feature allows organizations to keep certain transaction data visible only to specific channel members?

Accepted Answer

Private data collections

Answer

Private data collections in Hyperledger Fabric allow a subset of organizations to store and transact with data that is kept private from other channel members.

Question 5

When designing a blockchain solution for HIPAA compliance, which requirement is most critical regarding patient data stored on-chain?

Accepted Answer

PHI should never be stored directly on the blockchain

Answer

HIPAA's minimum necessary standard and security requirements mean that Protected Health Information (PHI) should not be stored directly on-chain; instead, hashes or references should be used.

(CBSA) Certified Blockchain Solution Architect Practice Test

(CBSA) Certified Blockchain Solution Architect Practice Test

CBSA Security & Compliance 2