Documentation & Best Practices Flashcards

Which approach best protects a peer's or orderer's signing private keys in production?

Answer: Use a hardware security module (HSM) via PKCS#11

Fabric supports HSMs so private keys never leave secure hardware.

For a Raft ordering service to tolerate one node failure, what is the minimum number of ordering nodes?

Answer: 3

Raft needs a majority quorum (2f+1), so three nodes tolerate one failure.

What is the main purpose of state-based (key-level) endorsement?

Answer: Setting an endorsement policy for specific keys that differs from the chaincode-level policy

It lets sensitive assets require different endorsers than the chaincode default.

Why are anchor peers defined for each organization in a channel?

Answer: To enable gossip discovery across organizations

Anchor peers let peers of different organizations find each other for cross-org gossip communication.

Which statement reflects ledger backup best practice for a peer?

Answer: Back up the block store and rebuild the state database from it if needed

The block store is the source of truth; the state database can be rebuilt from blocks (or use ledger snapshots in newer releases).

When should you create a separate Fabric channel?

Answer: When a subset of organizations needs a ledger isolated from others

Channels provide data isolation between groups of members who transact privately.

What should a network operations document or connection profile for client apps include?

Answer: Peer, orderer, and CA endpoints with TLS CA certificates, without secrets

Connection profiles describe endpoints and trust anchors so clients can connect; private keys must never be included.