← All CBDH Flashcard Decks

Security & Access Control Flashcards

7 cards from real CBDH practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Access Control flashcards as text
  1. What is stored on the channel ledger for a private data collection write?

    Answer: Only a hash of the private data

    Only hashes go to the channel ledger; real data stays in members' side databases.

  2. What does memberOnlyRead set to true in a collection definition do?

    Answer: Restricts chaincode invocation to collection members only for reads by clients

    memberOnlyRead requires that clients reading the data belong to a collection member organization.

  3. Which ClientIdentity chaincode API retrieves a custom attribute from the caller's certificate for ABAC?

    Answer: GetAttributeValue

    ClientIdentity.GetAttributeValue reads attributes embedded in the X.509 certificate.

  4. Why should chaincode avoid using random numbers or local system time to compute state changes?

    Answer: Different endorsers would produce different results, causing endorsement mismatch

    Chaincode must be deterministic so endorsing peers return identical read/write sets.

  5. How can a collection require specific organizations to endorse writes to private data?

    Answer: By a collection-level endorsement policy

    Collections can define their own endorsementPolicy overriding the chaincode-level one.

  6. Why should sensitive inputs be passed in the transient field of a proposal?

    Answer: It keeps them out of the transaction submitted to the ordering service

    Transient data is not included in the transaction sent to ordering, so orderers never see it.

  7. Which chaincode stub-related call returns the MSP ID of the invoking client's organization?

    Answer: GetMSPID on the ClientIdentity

    ClientIdentity.GetMSPID returns the caller's organization MSP ID, commonly used for ownership checks.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. blockchaintrainingalliance.com — Test delivery, passing score, score release, test dates, fees, exam format, time limit · verified Oct 2026