Cloud Infrastructure & Services Flashcards

Which Kubernetes resource is best suited to give each Fabric peer pod a stable network identity and its own persistent ledger volume?

Answer: StatefulSet with volumeClaimTemplates

StatefulSets provide stable pod names and per-replica PersistentVolumeClaims, which suits peers that hold ledger state.

Which AWS service lets you create and manage Hyperledger Fabric networks without operating the underlying nodes yourself?

Answer: Amazon Managed Blockchain

Amazon Managed Blockchain is the fully managed service that supports Hyperledger Fabric networks, members, and peer nodes.

Why is emptyDir a poor choice for storing a peer's ledger data in Kubernetes?

Answer: It is deleted when the pod is removed from the node

emptyDir storage is tied to the pod lifecycle, so ledger data is lost when the pod is deleted or rescheduled.

What is the main purpose of a Kubernetes Secret in a Fabric deployment?

Answer: Storing sensitive material such as private keys and TLS credentials

Secrets hold sensitive data like signing keys and TLS certificates that are injected into pods.

Which tool is commonly used to package and version the Kubernetes manifests for deploying a blockchain network repeatably?

Answer: Helm

Helm charts template and version Kubernetes resources so networks can be deployed consistently.

Which cloud practice best protects an organization's Fabric private signing keys from extraction?

Answer: Placing them in an HSM or cloud KMS-backed key store

HSMs and cloud KMS keep private keys in hardened hardware or services where they cannot be exported in plaintext.

A peer's gRPC endpoint must be reachable by clients outside the cluster. Which Kubernetes object typically exposes it?

Answer: Service of type LoadBalancer or an Ingress

A LoadBalancer Service or Ingress routes external traffic to pods inside the cluster.