Identity & Certificate Management Flashcards
7 cards from real CBDH practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Identity & Certificate Management flashcards as text
What is Idemix (Identity Mixer) in Hyperledger Fabric?
Answer: A privacy-preserving credential scheme that allows anonymous transactions
Idemix is a cryptographic protocol in Fabric that provides privacy-preserving credentials, allowing users to prove membership in an organization without revealing their specific identity.
What is an intermediate CA in Hyperledger Fabric?
Answer: A CA that is signed by a root CA and can issue certificates to end entities
An intermediate CA is a CA whose certificate is signed by a root CA, providing an additional trust hierarchy layer and isolating the root CA from direct certificate issuance.
How is a client's identity accessed within Hyperledger Fabric chaincode?
Answer: Using the ClientIdentity object from the chaincode shim package
Chaincode uses the `ClientIdentity` interface from the `github.com/hyperledger/fabric-chaincode-go/pkg/cid` package to access the invoking client's identity, attributes, and certificates.
What is the BCCSP in Hyperledger Fabric?
Answer: Blockchain Cryptographic Service Provider, which handles cryptographic operations
BCCSP (Blockchain Cryptographic Service Provider) is the pluggable interface in Fabric that abstracts cryptographic operations such as key generation, signing, hashing, and verification.
What happens to a Hyperledger Fabric identity when its certificate is added to a Certificate Revocation List (CRL)?
Answer: The identity is revoked and can no longer participate in any network operations
Adding a certificate to the CRL revokes that identity, preventing it from authenticating or participating in any network operations such as sending transactions or queries.
What is the purpose of the `keystore` folder in a Hyperledger Fabric MSP directory?
Answer: To store the private key corresponding to the entity's signing certificate
The `keystore` folder in an MSP directory contains the private key used for signing transactions and proposals, corresponding to the public key embedded in the `signcerts` certificate.
In Hyperledger Fabric, which MSP component stores the trusted root CA certificates used to validate identities from an organization?
Answer: cacerts
The `cacerts` folder in an MSP directory stores the self-signed root CA certificates that are trusted for validating the identity certificates of organization members.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- blockchaintrainingalliance.com — Test delivery, passing score, score release, test dates, fees, exam format, time limit · verified Oct 2026