Compliance & Governance Flashcards

Which Sawtooth component stores on-chain configuration such as allowed transaction families?

Answer: The Settings transaction family

Sawtooth's Settings transaction family stores on-chain settings, changed according to voting settings.

A consortium wants to add a new organization to an existing Fabric channel. What is the correct first step?

Answer: Create a config update adding the org's MSP and gather required admin signatures

Adding an org requires a channel config update meeting the mod_policy before its peers can join.

Which approach best supports the 'right to be forgotten' with Fabric private data collections?

Answer: Use blockToLive to purge private data from peers after a set number of blocks

blockToLive removes private data from side databases while only the hash remains on the ledger.

What is the main compliance benefit of an immutable, append-only ledger for auditing?

Answer: Records cannot be silently altered, giving a reliable audit trail

Tamper-evident history supports audits, though it does not itself ensure regulatory compliance.

In Hyperledger Aries, what does a verifier check when receiving a verifiable presentation?

Answer: The cryptographic proof and that the credential issuer is trusted and not revoked

Verifiers validate proofs against the issuer's published data and revocation registry.

Which Fabric artifact defines consortium, organizations, policies and orderer parameters at network bootstrap?

Answer: configtx.yaml

configtx.yaml is used by configtxgen to produce genesis blocks and channel transactions.

Which practice best supports separation of duties in chaincode governance?

Answer: Requiring multiple organizations to approve and commit chaincode definitions

Multi-org approval prevents a single party from unilaterally changing business logic.