CBSE Credential Curriculum and Topics 3 — Questions and Answers
Question 1: Which CBSE topic area addresses the process of formally verifying smart contract logic before deployment?
- Incident Response
- Formal Verification and Auditing (Correct answer)
- Tokenomics Security
- Node Configuration Hardening
Correct answer: Formal Verification and Auditing
Formal Verification and Auditing covers mathematical proof techniques and code audit methodologies used to confirm that smart contract behavior matches its specification.
Question 2: A CBSE professional is reviewing a DeFi protocol's flash loan mechanism. Flash loan attacks are dangerous primarily because they allow attackers to do what?
- Permanently freeze funds in a smart contract
- Borrow large amounts of capital with no collateral within a single transaction block (Correct answer)
- Steal validator node credentials
- Alter the blockchain's consensus rules
Correct answer: Borrow large amounts of capital with no collateral within a single transaction block
Flash loans provide uncollateralized capital within a single atomic transaction, allowing attackers to manipulate prices or exploit vulnerabilities at scale with no upfront capital risk.
Question 3: The CBSE curriculum covers cryptographic hash functions. Which property ensures that two different inputs cannot produce the same hash output?
- Pre-image resistance
- Collision resistance (Correct answer)
- Second pre-image resistance
- Avalanche effect
Correct answer: Collision resistance
Collision resistance means it is computationally infeasible to find two distinct inputs that produce the same hash digest, protecting blockchain integrity.
Question 4: In the CBSE body of knowledge, what is the primary security concern with using a deterministic wallet (BIP-32 HD wallet)?
- HD wallets do not support multi-signature transactions
- Compromise of the master seed exposes all derived child keys (Correct answer)
- HD wallets use weak elliptic curve parameters by default
- Deterministic wallets cannot be backed up offline
Correct answer: Compromise of the master seed exposes all derived child keys
Because all child keys are derived from a single master seed in a BIP-32 HD wallet, an attacker who obtains the seed gains control over every address in the wallet hierarchy.
Question 5: Which CBSE curriculum topic examines the risks posed by Miner/Maximal Extractable Value (MEV) to blockchain fairness and security?
- Key Management
- Consensus and MEV Security (Correct answer)
- Identity and Access Management
- Regulatory Compliance
Correct answer: Consensus and MEV Security
Consensus and MEV Security explores how validators or miners can reorder, insert, or censor transactions to extract value, undermining transaction fairness and protocol integrity.
Question 6: According to CBSE standards, which attack vector targets blockchain nodes by flooding the network with invalid transactions to exhaust resources?
- Eclipse attack
- Sybil attack
- Denial-of-Service (DoS) / Spam attack (Correct answer)
- Long-range attack
Correct answer: Denial-of-Service (DoS) / Spam attack
A DoS or spam attack on a blockchain network involves flooding nodes with high volumes of invalid or low-fee transactions to exhaust memory, CPU, or bandwidth resources.
Question 7: The CBSE curriculum addresses cross-chain bridge security. What is the most common vulnerability class exploited in bridge hacks?
- Weak consensus mechanisms on the destination chain
- Flawed or over-permissioned smart contract logic controlling locked funds (Correct answer)
- Insufficient block time on the source chain
- Use of symmetric rather than asymmetric cryptography
Correct answer: Flawed or over-permissioned smart contract logic controlling locked funds
Most major bridge exploits (e.g., Ronin, Wormhole) stem from flawed smart contract logic, missing validation checks, or compromised multi-sig keys controlling the bridge's locked assets.
CBSE Credential Curriculum and Topics 3
Which CBSE topic area addresses the process of formally verifying smart contract logic before deployment?