Security & Access Control Flashcards

What do affiliations in Fabric CA represent?

Answer: A hierarchy of organizational units used to restrict which identities a registrar can manage

Affiliations organize identities, and registrars can only register identities within their own affiliation tree.

Which Fabric CA attribute lets a registrar register identities with specific types such as client or peer?

Answer: hf.Registrar.Roles

hf.Registrar.Roles lists the identity types a registrar may register.

In a Raft ordering service, how do orderer nodes authenticate each other?

Answer: Mutual TLS using consenter TLS certificates listed in the channel config

Raft consenters are identified by their client and server TLS certificates in the channel configuration.

What is the role of anchor peers in gossip between organizations?

Answer: They let peers of different organizations discover each other

Anchor peers are known endpoints enabling cross-organization gossip discovery.

Which Fabric CA operation obtains a new certificate for an already enrolled identity using its existing certificate?

Answer: Reenroll

Reenroll issues a new certificate authenticated by the existing one rather than a password.

In Hyperledger Besu, what does node permissioning do?

Answer: Restricts which nodes may connect to the network via an allowlist

Node permissioning uses an allowlist (local or on-chain) of permitted enodes.

In Hyperledger Indy, what is used to let parties verify credential claims without a central authority?

Answer: Decentralized identifiers and verifiable credentials anchored on the ledger

Indy anchors DIDs and credential schemas on a ledger enabling verifiable credential exchange.