CBSE Architectural and Design Security 2

Question 1

In a permissioned blockchain architecture, which access control model is most appropriate for enforcing role-based restrictions on transaction submission?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 2

What cryptographic mechanism enables a node to prove it possesses a valid credential without revealing the credential itself during network authentication?

Accepted Answer

Zero-knowledge proof

Answer

Symmetric key exchange

Answer

Hash-based message authentication

Answer

Threshold signature

Question 3

A blockchain design uses a separate chain for high-frequency micropayments that periodically settles to the main chain. This pattern is best described as:

Accepted Answer

Sidechain

Answer

Sharding

Answer

State channel / payment channel

Answer

Cross-chain atomic swap

Question 4

Which threat does the 'nothing-at-stake' problem primarily affect in blockchain consensus design?

Accepted Answer

Proof-of-Stake validator equivocation

Answer

Proof-of-Work mining centralization

Answer

Byzantine fault tolerance threshold

Answer

Sybil resistance in permissioned networks

Question 5

When designing a multi-signature wallet contract, what is the primary security risk of setting the required-signature threshold too low?

Accepted Answer

Reduced resistance to key compromise enabling unauthorized fund transfer

Answer

Increased gas costs per transaction

Answer

Slower block confirmation times

Answer

Incompatibility with hardware wallets

Question 6

Which architectural principle is violated when a smart contract stores all application state on-chain, including data that never participates in consensus logic?

Accepted Answer

Separation of concerns

Answer

Least privilege

Answer

Defense in depth

Answer

Fail-safe defaults

Question 7

In Hyperledger Fabric, which component is responsible for ordering transactions into blocks before distributing them to peers?

Accepted Answer

Ordering service (orderer)

Answer

Endorsing peer

Answer

Committing peer

Answer

Certificate Authority