Compliance & Governance Flashcards

An auditor needs read-only access to a Fabric channel's ledger data. What is the most appropriate governance approach?

Answer: Issue an identity in a member org with a role limited by channel Readers policy and ACLs

Least privilege is achieved through identities and ACLs granting only read access.

In Fabric, what is the purpose of an endorsement policy?

Answer: It specifies which organizations' peers must endorse a transaction for it to be valid

Validation checks that the transaction's endorsements satisfy the chaincode's endorsement policy.

Which Fabric feature allows keeping data private from other channel members without creating a new channel?

Answer: Private data collections

Private data collections store data only on authorized peers while hashes go on the channel ledger.

Which statement about Hyperledger Besu permissioning is accurate?

Answer: Besu supports node and account permissioning, local or on-chain via smart contracts

Besu offers local file-based or smart-contract-based on-chain permissioning for nodes and accounts.

Why is a certificate revocation list (CRL) important for blockchain compliance in Fabric?

Answer: It lets an MSP reject identities whose certificates were compromised or terminated

Revoked certificates in the MSP configuration are rejected during identity validation.

What role do Fabric ACLs (access control lists) play on a channel?

Answer: They map resources such as system chaincode functions and events to channel policies

ACLs bind peer resources to policies, such as which orgs may query or invoke them.

Which consensus-related governance concern is unique to permissioned networks like Fabric compared with public chains?

Answer: Consortium members decide who may join and operate orderers

Permissioned networks rely on agreed membership and operational roles set by the consortium.