Compliance & Governance Flashcards

A regulator requires proof that peers used approved chaincode. Which Fabric artifact identifies the chaincode installed and approved?

Answer: The chaincode package ID and committed definition with its hash

The package ID is a label plus a hash of the package, and approvals reference it in the committed definition.

Which type of data is generally a poor fit for storing directly on a shared ledger from a privacy compliance viewpoint?

Answer: Unencrypted personally identifiable information

PII on an immutable ledger creates deletion and exposure risks.

How does Hyperledger Fabric enforce that only identities from member organizations can submit transactions to a channel?

Answer: Through channel Writers policies and MSP identity validation

Policies reference MSP principals, and identities are validated against the MSP configuration.

What is a key advantage of using TLS mutual authentication between Fabric nodes for compliance?

Answer: It verifies both sides' identities and encrypts data in transit

Mutual TLS authenticates peers and orderers and protects communication confidentiality.

Which scenario best demonstrates governance of an upgrade to chaincode in Fabric v2?

Answer: Each org approves the new definition with a new sequence number, then it is committed

Upgrades require incremented sequence numbers with approvals meeting the lifecycle policy.

What does the Hyperledger Fabric endorsement policy 'OutOf(2, Org1.peer, Org2.peer, Org3.peer)' require?

Answer: Endorsements from peers of any two of the three orgs

OutOf(2, ...) is satisfied when at least two of the listed principals endorse.

Which Hyperledger tool is intended for benchmarking performance rather than governance or compliance?

Answer: Hyperledger Caliper

Caliper measures blockchain performance metrics like throughput and latency.