CCE - Certified Cryptocurrency Expert Wallets and Asset Security Questions and Answers — Questions and Answers
Question 1: A cryptocurrency exchange wants to implement the highest level of security for managing its corporate treasury, which is controlled by three senior executives. Which wallet configuration offers the best protection against both external hacks and internal collusion?
- A single hardware wallet stored in a bank vault.
- A 2-of-3 multi-signature wallet, with each executive holding one key. (Correct answer)
- Three separate hot wallets, with each executive managing one.
- A smart contract wallet with a time-lock feature.
Correct answer: A 2-of-3 multi-signature wallet, with each executive holding one key.
A 2-of-3 multi-signature (multisig) wallet requires two of the three executives to approve any transaction. This setup prevents a single point of failure; a compromised or malicious single executive cannot move funds alone. It also offers redundancy in case one key is lost.
Question 2: An investor is planning to hold a significant amount of cryptocurrency for several years and will not need to access it frequently. Which of the following represents the most secure storage method for this long-term investment?
- A mobile software wallet with biometric authentication.
- An exchange-based custodial wallet with 2FA enabled.
- A hardware wallet stored in a secure, offline location. (Correct answer)
- A desktop wallet on a password-protected computer.
Correct answer: A hardware wallet stored in a secure, offline location.
Hardware wallets, also known as cold wallets, store private keys offline on a physical device. This isolation from the internet makes them nearly immune to online threats like malware and hacking, which is ideal for long-term storage ('hodling').
Question 3: A user receives an urgent email that appears to be from their wallet provider, claiming their account is compromised and they must click a link immediately to verify their identity and secure their assets. This is a classic example of which type of attack?
- A Denial-of-Service (DoS) attack
- A Sybil attack
- A dusting attack
- A phishing attack (Correct answer)
Correct answer: A phishing attack
Phishing is a form of social engineering where attackers use deceptive emails, websites, or messages to trick individuals into revealing sensitive information, such as private keys or login credentials. The sense of urgency and threat to assets are common tactics.
Question 4: Which of the following is a primary function of a Hardware Security Module (HSM) in the context of institutional cryptocurrency custody?
- To provide a user-friendly interface for trading assets.
- To ensure high availability and network uptime for an exchange.
- To securely generate, store, and manage cryptographic keys in a tamper-resistant physical device. (Correct answer)
- To execute complex smart contract logic for DeFi protocols.
Correct answer: To securely generate, store, and manage cryptographic keys in a tamper-resistant physical device.
A Hardware Security Module (HSM) is a dedicated crypto-processor designed specifically to protect the entire lifecycle of cryptographic keys. It performs operations like key generation and transaction signing within its secure, tamper-resistant hardware, ensuring keys are never exposed to less secure environments.
Question 5: When setting up a new non-custodial wallet, a user is presented with a 12-word recovery phrase. What is the most critical security practice for managing this phrase?
- Emailing the phrase to a trusted family member for backup.
- Storing it in a password manager application in the cloud.
- Writing it down physically and storing it in multiple secure, offline locations. (Correct answer)
- Taking a screenshot of the phrase and saving it in a hidden folder on a smartphone.
Correct answer: Writing it down physically and storing it in multiple secure, offline locations.
A recovery phrase (or seed phrase) is the master key to a non-custodial wallet. Storing it offline on a physical medium like paper or metal prevents it from being compromised by online threats such as malware or hackers. Storing it in multiple secure locations protects against physical loss or damage.
Question 6: Which security measure is most vulnerable to a 'SIM swap' attack, potentially leading to the compromise of a user's cryptocurrency exchange account?
- Hardware security key (U2F/FIDO2)
- Time-based One-Time Password (TOTP) from an authenticator app
- SMS-based two-factor authentication (2FA) (Correct answer)
- Biometric authentication (fingerprint or face ID)
Correct answer: SMS-based two-factor authentication (2FA)
In a SIM swap attack, a fraudster convinces a mobile carrier to transfer the victim's phone number to a SIM card they control. This allows them to intercept SMS messages, including 2FA codes, giving them access to accounts secured by this method. Authenticator apps and hardware keys are not vulnerable to this specific attack.
CCE - Certified Cryptocurrency Expert Wallets and Asset Security Questions and Answers
A cryptocurrency exchange wants to implement the highest level of security for managing its corporate treasury, which is controlled by three senior executives.
Which wallet configuration offers the best protection against both external hacks and internal collusion?