Certified Bitcoin Professional (CBP) Exam — Questions and Answers

Question 1: A blockchain project is launching in a new country with strict crypto regulations. Which communication approach is most appropriate?

Avoid any public communication until the product fully launches
Mirror the existing marketing materials from other markets
Engage local legal counsel and tailor messaging to regional compliance requirements (Correct answer)
Focus communications exclusively on the technical whitepaper

Correct answer: Engage local legal counsel and tailor messaging to regional compliance requirements

Localized compliance-aware messaging ensures the project meets jurisdictional requirements and builds trust with local stakeholders.

Question 2: Which foundational computer science problem does blockchain consensus primarily aim to solve?

The Oracle Problem
The Double Spend Problem
The Byzantine Generals Problem (Correct answer)
The Halting Problem

Correct answer: The Byzantine Generals Problem

Blockchain consensus mechanisms were designed to solve the Byzantine Generals Problem — achieving reliable agreement among distributed parties who may be unreliable or actively malicious.

Question 3: What does a private key in cryptocurrency enable the user to do?

Access and control funds (Correct answer)
Verify network updates
Mine new blocks
Track market trends

Correct answer: Access and control funds

A private key grants the holder control over their cryptocurrency assets, allowing them to sign transactions and access their funds.

Question 4: Which consensus mechanism did Ethereum adopt following 'The Merge' in September 2022?

Proof of Work (PoW)
Proof of Authority (PoA)
Proof of Stake (PoS) (Correct answer)
Delegated Proof of Stake (DPoS)

Correct answer: Proof of Stake (PoS)

Ethereum transitioned from Proof of Work to Proof of Stake in The Merge, dramatically reducing network energy consumption while maintaining security.

Question 5: What is a digital signature in cryptocurrency?

A form of ID verification
A cryptographic validation of a transaction (Correct answer)
A random password
A visual QR code

Correct answer: A cryptographic validation of a transaction

A digital signature is a cryptographic technique that verifies the authenticity and integrity of a message or transaction.

Question 6: A cryptocurrency certification consortium professional discovers a discrepancy during communication & stakeholder engagement review. What is the most appropriate immediate action?

Engaging stakeholders collaboratively to align goals and expectations (Correct answer)
Working independently to avoid conflicting opinions
Limiting communication to written reports only
Accepting all stakeholder requests without prioritization

Correct answer: Engaging stakeholders collaboratively to align goals and expectations

Engaging stakeholders collaboratively to align goals and expectations is the correct approach because effective communication & stakeholder engagement in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 7: What is a 'nonce' in the context of cryptocurrency mining?

A random number miners adjust to find a valid block hash (Correct answer)
The unique identifier assigned to each wallet address
A timestamp that records when a block was created
A cryptographic key used to sign transactions

Correct answer: A random number miners adjust to find a valid block hash

A nonce is an arbitrary number miners iterate through to find a hash output that meets the network's difficulty target, making each mining attempt unique.

Question 8: What is the most common mistake professionals make when implementing blockchain technology strategies?

Developing contingency plans for high-probability risk scenarios (Correct answer)
Transferring all risk to external partners through contracts
Responding to problems only after they occur
Creating contingency plans for every possible scenario regardless of probability

Correct answer: Developing contingency plans for high-probability risk scenarios

Developing contingency plans for high-probability risk scenarios is the correct approach because effective blockchain technology in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 9: What does the derivation path m/44'/0'/0'/0/0 signify in an HD wallet?

A BIP44 Bitcoin mainnet address at account 0, external chain, index 0 (Correct answer)
A Ethereum mainnet address at account 0, index 0
A SegWit address on the Bitcoin network
A testnet address for any coin

Correct answer: A BIP44 Bitcoin mainnet address at account 0, external chain, index 0

BIP44 defines the path m/purpose'/coin_type'/account'/change/index; 44' = BIP44, 0' = Bitcoin, 0' = account 0, 0 = external, 0 = first address.

Question 10: What is a 'flash loan attack' and which protocol layer does it primarily target?

A phishing attack targeting end users
A brute-force wallet attack targeting the network layer
An uncollateralized loan exploit targeting DeFi smart contracts within a single transaction (Correct answer)
A 51% attack targeting the consensus layer

Correct answer: An uncollateralized loan exploit targeting DeFi smart contracts within a single transaction

Flash loan attacks borrow large uncollateralized sums within one transaction block to manipulate prices or exploit logical flaws in DeFi smart contracts.

Question 11: What is an oracle in the context of smart contracts?

A tool used to compile and deploy Solidity contracts
A service that provides real-world external data (e.g., asset prices) to smart contracts that cannot access off-chain information directly (Correct answer)
A governance body that audits smart contract code
A prediction market protocol on Ethereum

Correct answer: A service that provides real-world external data (e.g., asset prices) to smart contracts that cannot access off-chain information directly

Oracles bridge the on-chain/off-chain gap by feeding external data (prices, weather, election results) into smart contracts, which are otherwise isolated from outside information.

Question 12: What is the primary role of a hash function in blockchain technology?

To send tokens
To ensure data integrity (Correct answer)
To encrypt emails
To store public keys

Correct answer: To ensure data integrity

Hash functions convert input data into a fixed-size string, providing integrity by making it nearly impossible to alter data without changing the hash.

Question 13: What is a hierarchical deterministic (HD) wallet in the context of cryptocurrency?

A wallet that generates a tree of key pairs from a single seed phrase (Correct answer)
A wallet that requires multiple signatures for transactions
A wallet that stores keys on a hardware device
A wallet managed by a centralized exchange

Correct answer: A wallet that generates a tree of key pairs from a single seed phrase

An HD wallet uses a single seed phrase to deterministically generate a hierarchical tree of private/public key pairs, per BIP32.

Question 14: A crypto custodian loses access to a client's private keys due to an employee error. Under which risk category would this incident be classified?

Credit risk
Market risk
Operational risk (Correct answer)
Liquidity risk

Correct answer: Operational risk

Loss of private keys due to human error, system failure, or process breakdown is classified as operational risk — losses arising from inadequate internal processes, people, or systems.

Question 15: Which technology allows smart contracts to operate on blockchain?

Cloud scripting engines
Distributed apps
Smart contract logic on blockchain (Correct answer)
HTTP protocol

Correct answer: Smart contract logic on blockchain

Smart contracts are self-executing agreements written in code and hosted on blockchain platforms like Ethereum.

Question 16: A C4-certified professional is asked to endorse a DeFi project they have not personally vetted. What should they do?

Decline or conduct thorough due diligence before endorsing (Correct answer)
Endorse it if the fee is sufficient
Ask a colleague to endorse it instead
Endorse it anonymously to avoid liability

Correct answer: Decline or conduct thorough due diligence before endorsing

Professional standards prohibit endorsing products without adequate due diligence to protect the public from misleading recommendations.

Question 17: Which tool or methodology is most appropriate for analyzing cryptographic principles outcomes?

Adjusting boundaries based on individual situations without guidelines
Prioritizing relationships over professional standards
Maintaining strict formality that inhibits collaboration
Maintaining professional boundaries while building collaborative relationships (Correct answer)

Correct answer: Maintaining professional boundaries while building collaborative relationships

Maintaining professional boundaries while building collaborative relationships is the correct approach because effective cryptographic principles in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 18: A crypto exchange implements a policy requiring two separate employees to authorize any withdrawal above $100,000. This is an example of which internal control?

Whistleblower protocol
Penetration testing
Dual control / four-eyes principle (Correct answer)
Segregation of duties

Correct answer: Dual control / four-eyes principle

The dual control (four-eyes) principle requires two independent individuals to authorize high-value or high-risk actions, reducing the risk of fraud, error, or unauthorized transactions.

Question 19: What does 'finality' mean in the context of blockchain consensus?

The point at which all mining rewards for a given block have been fully distributed
The maximum number of transactions a single block can contain
The process of permanently archiving and deleting old transaction records
The guarantee that a confirmed transaction cannot be reversed or reorganized out of the chain (Correct answer)

Correct answer: The guarantee that a confirmed transaction cannot be reversed or reorganized out of the chain

Finality refers to the irreversibility of confirmed transactions; once achieved, a transaction is permanently recorded and cannot be undone by any network participant.

Question 20: Which key management practice does C4 recommend for long-term storage of significant cryptocurrency holdings?

Using a reputable hardware wallet with an offline, encrypted backup of the seed phrase (Correct answer)
Keeping funds on a regulated exchange for insurance
Storing the seed phrase in a cloud password manager
Using a mobile hot wallet with biometric authentication only

Correct answer: Using a reputable hardware wallet with an offline, encrypted backup of the seed phrase

C4 best practices recommend hardware wallets paired with secure, offline backups (e.g., metal seed plates) for long-term significant holdings.

Question 21: What is the main risk associated with using a brain wallet (a wallet whose private key is derived from a memorized passphrase)?

They are not compatible with blockchain explorers
Human-chosen passphrases have low entropy and are vulnerable to dictionary attacks (Correct answer)
They require a hardware device to function
Brain wallets cannot support multisig setups

Correct answer: Human-chosen passphrases have low entropy and are vulnerable to dictionary attacks

Brain wallets derived from memorable phrases have far less entropy than randomly generated seeds, making them highly susceptible to dictionary and brute-force attacks.

Question 22: During a communication & stakeholder engagement audit, which documentation is most critical to have readily available?

Blaming individual team members for process failures
Accepting recurring problems as unavoidable
Addressing symptoms without investigating deeper causes
Conducting root cause analysis to identify underlying systemic issues (Correct answer)

Correct answer: Conducting root cause analysis to identify underlying systemic issues

Conducting root cause analysis to identify underlying systemic issues is the correct approach because effective communication & stakeholder engagement in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 23: An organization holds Bitcoin and wants to reduce exposure to BTC price volatility without selling. Which approach best achieves this?

Buying more BTC on margin
Moving BTC to a hardware wallet
Shorting BTC futures (Correct answer)
Staking BTC in a liquidity pool

Correct answer: Shorting BTC futures

Shorting BTC futures creates a position that profits when BTC falls, offsetting losses in the spot holding without requiring a sale.

Question 24: Under the C4 framework, which practice best demonstrates ongoing stakeholder engagement for a cryptocurrency exchange?

Publishing quarterly AMA (Ask Me Anything) sessions with leadership (Correct answer)
Limiting community forums to verified institutional traders
Restricting user feedback to annual surveys
Outsourcing all communications to a single PR agency

Correct answer: Publishing quarterly AMA (Ask Me Anything) sessions with leadership

Regular AMA sessions keep leadership accessible and create a two-way communication channel with the broader stakeholder community.

Question 25: What is the risk of storing a seed phrase digitally in a photograph or note-taking app?

Cloud sync or app compromise can expose the seed phrase to attackers (Correct answer)
The seed phrase may become corrupted over time
Digital storage is slower to access in an emergency
The seed phrase format may not be recognized

Correct answer: Cloud sync or app compromise can expose the seed phrase to attackers

Cloud-synced apps can be hacked or compromised, exposing the seed phrase and allowing an attacker to drain the wallet completely.

Question 26: In the context of C4 certification, what is operational security (OPSEC) as it applies to managing cryptocurrency keys?

Regulatory reporting of crypto transactions to the IRS
Backing up wallets to multiple cloud providers
Practices that minimize information leakage about wallet holdings, addresses, and key storage methods to potential adversaries (Correct answer)
The process of auditing smart contracts before deployment

Correct answer: Practices that minimize information leakage about wallet holdings, addresses, and key storage methods to potential adversaries

OPSEC in crypto key management means limiting disclosure of wallet addresses, balances, and storage methods to reduce targeting by attackers.

Question 27: A new regulation impacts cryptographic principles procedures. What should a C4 professional do first?

Ensuring compliance with current regulatory requirements and standards (Correct answer)
Delegating compliance oversight to administrative staff
Complying only with regulations that have enforcement mechanisms
Interpreting regulations loosely to allow maximum flexibility

Correct answer: Ensuring compliance with current regulatory requirements and standards

Ensuring compliance with current regulatory requirements and standards is the correct approach because effective cryptographic principles in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 28: What is the primary function of Proof of Work (PoW) in a blockchain network?

To verify user identities before allowing transactions
To distribute block rewards equally among all network participants
To allow token holders to vote on network upgrades
To require miners to solve computationally difficult puzzles to validate transactions (Correct answer)

Correct answer: To require miners to solve computationally difficult puzzles to validate transactions

Proof of Work requires miners to expend computational energy solving cryptographic puzzles, which secures the network and validates transactions.

Question 29: A cryptocurrency certification consortium professional discovers a discrepancy during professional ethics & standards review. What is the most appropriate immediate action?

Accepting all stakeholder requests without prioritization
Working independently to avoid conflicting opinions
Engaging stakeholders collaboratively to align goals and expectations (Correct answer)
Limiting communication to written reports only

Correct answer: Engaging stakeholders collaboratively to align goals and expectations

Engaging stakeholders collaboratively to align goals and expectations is the correct approach because effective professional ethics & standards in the cryptocurrency certification consortium field requires adherence to professional standards, evidence-based practices, and systematic methodology. This approach ensures consistent, high-quality outcomes while maintaining professional accountability.

Question 30: What is the purpose of a DAO (Decentralized Autonomous Organization) in the DeFi ecosystem?

To provide insurance against smart contract exploits
To enable token holders to collectively govern a protocol's rules, treasury, and development through on-chain voting (Correct answer)
To serve as a regulatory body for decentralized exchanges
To act as the sole issuer of the protocol's governance token

Correct answer: To enable token holders to collectively govern a protocol's rules, treasury, and development through on-chain voting

A DAO uses smart contracts and governance tokens to allow a community of stakeholders to collaboratively manage a protocol without central leadership.

Question 31: What is a watch-only wallet?

A wallet that holds the public keys/addresses only, allowing balance monitoring without the ability to spend funds (Correct answer)
A wallet restricted to receiving funds from a whitelist
A wallet that only supports staking
A hardware wallet in read-only mode after a firmware update

Correct answer: A wallet that holds the public keys/addresses only, allowing balance monitoring without the ability to spend funds

A watch-only wallet contains only public keys or addresses, enabling balance and transaction monitoring without storing private keys on the device.

Certified Bitcoin Professional (CBP) Exam

The C4 Certified Bitcoin Professional (CBP) exam validates professional working knowledge of Bitcoin and cryptocurrency across six core domains including cryptography, blockchain technology, wallet security, mining, and Bitcoin commerce. Candidates must answer 75 questions in just 20 minutes with a 70% passing threshold.

Questions

10 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds