CCA Security & Risk Analysis 2

Question 1

Which attack vector specifically targets cryptocurrency users by redirecting them to a fake exchange website through DNS manipulation?

Accepted Answer

DNS spoofing

Answer

DNS spoofing (cache poisoning) redirects users to malicious sites by corrupting DNS resolver caches with fraudulent records.

Question 2

In a 51% attack on a proof-of-work blockchain, what is the primary capability the attacker gains?

Accepted Answer

Double-spending previously confirmed transactions

Answer

A majority hashrate attacker can reorganize the chain and reverse recently confirmed transactions to double-spend coins.

Question 3

What is the primary risk associated with a cryptocurrency exchange holding user funds in a single omnibus hot wallet?

Accepted Answer

Concentration risk enabling large-scale theft

Answer

A single omnibus hot wallet concentrates all user funds in one target, making a single compromise catastrophic.

Question 4

Which risk management framework is most commonly adapted for assessing cybersecurity risks in cryptocurrency custody operations?

Accepted Answer

NIST Cybersecurity Framework

Answer

The NIST Cybersecurity Framework provides identify, protect, detect, respond, and recover functions directly applicable to crypto custody security.

Question 5

A DeFi protocol's smart contract has an unchecked external call that allows reentrancy. Which audit finding category does this fall under?

Accepted Answer

Critical severity

Answer

Reentrancy vulnerabilities are classified as critical because they can drain all funds from a contract, as demonstrated by the DAO hack.

(CCA) Certified Cryptocurrency Auditor Practice Test