Certified Blockchain Expert (CBE) — Questions and Answers

Question 1: Why is nonce reuse catastrophic in ECDSA?

It allows an attacker to compute the private key from two signatures (Correct answer)
It invalidates the block reward
It causes the signature to expire immediately
It doubles transaction fees

Correct answer: It allows an attacker to compute the private key from two signatures

If the same nonce k is used for two different messages, the private key can be algebraically derived from the two signature pairs.

Question 2: Which of the following is a primary characteristic of the Delegated Proof of Stake (DPoS) consensus mechanism?

Miners compete to solve complex computational puzzles.
Token holders vote to elect a limited number of block producers. (Correct answer)
Validators are chosen based on the age of their staked coins.
All token holders directly participate in validating blocks.

Correct answer: Token holders vote to elect a limited number of block producers.

In Delegated Proof of Stake (DPoS), token holders use their stake to vote for a limited number of 'delegates' or 'witnesses'. These elected officials are then responsible for validating transactions and producing blocks. This system is designed to be more efficient and faster than traditional Proof of Stake.

Question 3: Which cryptographic concept underpins the security of blockchain Proof-of-Work by making it easy to verify but hard to compute?

Homomorphic encryption
Computational asymmetry (one-way functions) (Correct answer)
Digital certificate chains
Symmetric key exchange

Correct answer: Computational asymmetry (one-way functions)

One-way functions are easy to evaluate but practically impossible to invert, so finding a valid nonce requires enormous work while verifying it takes a single hash computation.

Question 4: A supply chain consortium wants to build a blockchain solution to track goods from manufacturer to retailer. They need to ensure that only authorized participants can view and add transactions. Which type of blockchain would be most suitable for this scenario?

Hybrid Blockchain
Public Blockchain
Sidechain
Permissioned (Private) Blockchain (Correct answer)

Correct answer: Permissioned (Private) Blockchain

A permissioned or private blockchain is the most suitable choice because it restricts access to a specific group of authorized participants. This allows the consortium to maintain confidentiality and control over who can interact with the supply chain data, which is a common requirement for enterprise-level applications.

Question 5: What is a 'reentrancy attack' in the context of smart contracts?

An exploit that forges validator signatures to steal ETH
A vulnerability caused by integer overflow in Solidity arithmetic
An attack that replays signed transactions on a different blockchain
A bug where a contract calls itself recursively to drain funds before state updates (Correct answer)

Correct answer: A bug where a contract calls itself recursively to drain funds before state updates

A reentrancy attack occurs when a malicious contract repeatedly calls back into the victim before the victim updates its balance, allowing repeated withdrawals.

Question 6: What is the primary purpose of a Key Derivation Function (KDF) like PBKDF2 in blockchain wallets?

Hashing block headers for Proof of Work
Generating public keys from private keys
Strengthening a user password before using it as cryptographic key material (Correct answer)
Validating transaction signatures

Correct answer: Strengthening a user password before using it as cryptographic key material

KDFs add computational cost (iterations, salting) to slow brute-force attacks when deriving encryption keys from user passwords.

Question 7: Hyperledger Fabric is best categorized as which type of blockchain?

Decentralized finance blockchain
Hybrid public-private blockchain
Public permissionless blockchain
Private or consortium permissioned blockchain (Correct answer)

Correct answer: Private or consortium permissioned blockchain

Hyperledger Fabric is a permissioned blockchain framework designed for enterprise consortiums and private networks.

Question 8: Which of the following describes a key difference between Proof of Stake (PoS) and Delegated Proof of Stake (DPoS)?

DPoS is significantly less energy-efficient than PoS.
PoS networks are immune to 51% attacks, while DPoS networks are not.
PoS relies on computational puzzles, while DPoS relies on staking.
In DPoS, token holders vote for a limited number of delegates to validate blocks, whereas in PoS, any user meeting the stake requirement can potentially be a validator. (Correct answer)

Correct answer: In DPoS, token holders vote for a limited number of delegates to validate blocks, whereas in PoS, any user meeting the stake requirement can potentially be a validator.

The primary distinction between PoS and DPoS is the selection process for block validators. In a typical PoS system, any participant who stakes the required amount of cryptocurrency has a chance to be selected to create a new block. In DPoS, token holders use their stake to vote for a smaller, fixed number of 'delegates' or 'witnesses' who are then responsible for block production and validation. This system is often considered more efficient and scalable but can lead to a higher degree of centralization.

Question 9: In asymmetric cryptography, if Alice wants to send Bob a confidential message, which key does she use to encrypt it?

Alice's public key
Bob's public key (Correct answer)
Bob's private key
Alice's private key

Correct answer: Bob's public key

Alice encrypts with Bob's public key so that only Bob, holding the corresponding private key, can decrypt the message.

Question 10: What distinguishes a permissioned blockchain use case in banking from a public blockchain use case in DeFi?

Permissioned chains restrict participation to vetted institutions, while public chains are open to anyone (Correct answer)
DeFi requires KYC while banking does not
Permissioned chains have no consensus mechanism
Public chains are faster and cheaper than permissioned chains in all cases

Correct answer: Permissioned chains restrict participation to vetted institutions, while public chains are open to anyone

Permissioned blockchains like Hyperledger Fabric limit node membership to approved entities, suiting regulated banking environments that need privacy and compliance.

Question 11: A consortium of financial institutions wants to build a distributed ledger for trade finance. Their primary requirements are strict data privacy where only parties involved in a transaction can view its details, and the absence of a volatile native cryptocurrency. Which blockchain platform is architecturally designed around a 'need-to-know' data distribution model rather than a global broadcast channel?

Public Ethereum Mainnet
Corda (Correct answer)
Hyperledger Fabric
Bitcoin

Correct answer: Corda

Corda is uniquely designed for use cases requiring high privacy. Unlike platforms that use broadcast channels (even private ones like in Fabric), Corda communicates transactions on a point-to-point, 'need-to-know' basis. Only the parties involved in a transaction, and optionally a Notary service, receive the data, making it ideal for the described financial scenario.

Question 12: Which feature of public blockchain makes it suitable for transparent charitable donation tracking?

All transactions are publicly visible and auditable by anyone (Correct answer)
Transactions can be reversed if misused
Only the charity can see donation records
High transaction fees deter small donors

Correct answer: All transactions are publicly visible and auditable by anyone

Public blockchains let donors trace their contributions to final beneficiaries with full transparency, reducing misappropriation.

Question 13: Which blockchain type is LEAST suitable for a decentralized finance (DeFi) application requiring open, permissionless access?

Solana
Hyperledger Fabric (Correct answer)
Ethereum mainnet
Avalanche

Correct answer: Hyperledger Fabric

Hyperledger Fabric is a permissioned blockchain that requires identity and access approval, making it incompatible with open DeFi applications.

Question 14: A blockchain network aims to be highly energy-efficient and reduce the hardware barrier to entry for participation. However, a major criticism is that it could lead to a 'rich get richer' scenario where the wealthiest participants have the most influence. Which consensus mechanism does this describe?

Proof of Burn (PoB)
Proof of Stake (PoS) (Correct answer)
Practical Byzantine Fault Tolerance (PBFT)
Proof of Work (PoW)

Correct answer: Proof of Stake (PoS)

Proof of Stake (PoS) selects validators based on the number of tokens they hold and are willing to 'stake'. This is highly energy-efficient compared to PoW. However, a common criticism is that individuals with more tokens (the 'richest') have a higher chance of being selected to validate blocks and earn rewards, potentially leading to wealth concentration and centralization of power.

Question 15: What is the significance of the 'longest chain rule' (Nakamoto Consensus) in Bitcoin?

Validators vote on which chain is longest at each epoch
The chain that has been running the longest in time is considered valid
Nodes always follow the chain with the most cumulative proof-of-work as the valid chain (Correct answer)
Blocks with the most transactions are always prioritized

Correct answer: Nodes always follow the chain with the most cumulative proof-of-work as the valid chain

Nodes adopt the chain representing the greatest cumulative computational work, making it economically infeasible for attackers to rewrite history.

Question 16: How are data blocks "chained" together to ensure transaction integrity?

A public key is stored in each block for data decryption
The hash of the genesis block is kept in all block headers
The hash of the previous block is written to the header of the current block (Correct answer)
The ID of the previous block is stored in the current block

Correct answer: The hash of the previous block is written to the header of the current block

Explanation: <br> Blocks of data entries and transactions are chained together and kept in an immutable format, allowing authorized network users to view and add information while preventing changes to existing records. Data integrity and participant authentication are ensured by sophisticated cryptography and key management.

Question 17: What is a 'shard' in the context of blockchain scalability?

A type of cryptographic key
A hardware wallet component
A smart contract storage unit
A partition of the network that processes transactions in parallel (Correct answer)

Correct answer: A partition of the network that processes transactions in parallel

Sharding divides the blockchain network into smaller partitions called shards, each capable of processing transactions independently to improve throughput.

Question 18: How does a blockchain network achieve fault tolerance against Byzantine failures?

Through consensus mechanisms that require agreement among a majority of nodes (Correct answer)
By limiting the block size to reduce errors
By encrypting all data with symmetric keys
By requiring all nodes to use the same hardware

Correct answer: Through consensus mechanisms that require agreement among a majority of nodes

Byzantine Fault Tolerant consensus algorithms allow the network to reach agreement even if some nodes behave maliciously or fail.

Question 19: Which hashing algorithm does Bitcoin use to produce block header hashes during proof-of-work mining?

SHA-3
Keccak-256
RIPEMD-160
SHA-256 (applied twice) (Correct answer)

Correct answer: SHA-256 (applied twice)

Bitcoin applies SHA-256 twice (SHA-256d) to compute the block header hash used in proof-of-work.

Question 20: In the context of Proof of Work (PoW) blockchains, what does the term 'probabilistic finality' mean?

The certainty of a transaction being irreversible increases as more blocks are added after it, but never reaches 100%. (Correct answer)
A transaction is considered final as soon as it is included in a block.
There is a 50/50 chance that any given transaction will be reversed.
The network's validators vote to finalize each block, making it irreversible.

Correct answer: The certainty of a transaction being irreversible increases as more blocks are added after it, but never reaches 100%.

Probabilistic finality, a characteristic of Nakamoto consensus (used in PoW), means that the likelihood of a transaction being reversed decreases as more blocks are built on top of the block containing it. While the probability of a reversal becomes extremely low after several confirmations (e.g., 6 blocks in Bitcoin), it never becomes an absolute certainty. This is in contrast to mechanisms like pBFT which offer absolute or deterministic finality.

Question 21: What is a 'selfish mining' attack in blockchain networks?

A miner submits fraudulent transactions to steal fees
A miner refuses to validate transactions from competitors
A miner hoards discovered blocks and releases them strategically to waste honest miners' work (Correct answer)
A miner creates fake identities to claim multiple block rewards

Correct answer: A miner hoards discovered blocks and releases them strategically to waste honest miners' work

Selfish mining withholds blocks to make honest miners waste effort on orphaned chains, giving the attacker a disproportionate share of rewards.

Question 22: Which vulnerability occurs when a Solidity integer wraps around its maximum or minimum value?

Integer overflow/underflow (Correct answer)
Delegatecall injection
Front-running
Reentrancy

Correct answer: Integer overflow/underflow

Before Solidity 0.8.0, arithmetic could silently wrap around (e.g., uint8(255) + 1 == 0), allowing attackers to bypass balance checks.

Question 23: In the architecture of Hyperledger Fabric, what is the specific and crucial role of the 'Ordering Service'?

To issue and validate digital certificates for network participants.
To maintain the world state database for a specific channel.
To establish a total order of transactions and package them into blocks to be distributed to peers. (Correct answer)
To execute smart contract logic (chaincode) and endorse transactions.

Correct answer: To establish a total order of transactions and package them into blocks to be distributed to peers.

The Ordering Service is a fundamental component of Hyperledger Fabric's architecture. Its primary responsibility is to receive endorsed transactions from clients, establish a consensus on the final and correct order of these transactions, and then package them into blocks. These blocks are then broadcast to the committing peers on the channel to be validated and appended to their copy of the ledger.

Question 24: Which Ethereum upgrade mechanism is exploited in an 'upgrade proxy attack'?

Attackers compromise the admin key of an upgradeable proxy contract to replace the logic contract with malicious code (Correct answer)
Attackers submit fake governance votes to trigger unauthorized protocol upgrades
Attackers exploit the beacon chain upgrade path to double-spend ETH
Attackers exploit the EIP upgrade process to insert backdoors in the base protocol

Correct answer: Attackers compromise the admin key of an upgradeable proxy contract to replace the logic contract with malicious code

Upgradeable proxy contracts delegate calls to a logic contract; if the admin key is compromised, attackers can swap in a malicious implementation.

Question 25: What is a 'replay attack' in the context of blockchain transactions, and which cryptographic element prevents it?

Broadcasting a valid signed transaction on another chain; prevented by chain ID in signatures (Correct answer)
Reusing hash values; prevented by SHA-256
Reusing old blocks; prevented by Merkle roots
Duplicating wallet keys; prevented by ECC

Correct answer: Broadcasting a valid signed transaction on another chain; prevented by chain ID in signatures

A replay attack reuses a signed transaction on a different chain; including the chain ID in the signed data (EIP-155) binds the signature to one specific chain.

Question 26: Which cryptographic weakness made early Bitcoin brain wallets (password-derived keys) vulnerable to theft?

Bitcoin's elliptic curve allowed recovery of the private key from two signed messages with the same nonce
Brain wallets leaked passwords through timing side-channels in the key derivation function
Low-entropy passwords could be brute-forced offline since the public address alone revealed which hash function to attack (Correct answer)
SHA-256 collisions allowed attackers to find alternative passwords producing the same private key

Correct answer: Low-entropy passwords could be brute-forced offline since the public address alone revealed which hash function to attack

Brain wallets hash a password to derive a private key; weak passwords are trivially brute-forced against all known Bitcoin addresses using GPU clusters.

Question 27: An attacker wants to isolate a single, specific node from the rest of the blockchain network. They do this by monopolizing all of the target node's incoming and outgoing peer connections with nodes they control. This allows the attacker to feed the victim false transaction data and a counterfeit view of the blockchain. Which network-level attack is being described?

Sybil Attack
Eclipse Attack (Correct answer)
Denial-of-Service Attack
Forking Attack

Correct answer: Eclipse Attack

An eclipse attack is a targeted network-level attack where a malicious actor takes control of all of a victim node's peer connections, effectively isolating it from the honest network. This 'eclipses' the node's view of the real blockchain, making it vulnerable to deception, such as accepting double-spent transactions.

Question 28: In a Proof of Stake (PoS) consensus mechanism, what is the primary role of a 'validator'?

To provide storage space on their hard drives to secure the network.
To propose and verify new blocks of transactions after being selected based on their economic stake. (Correct answer)
To solve complex mathematical puzzles faster than other participants.
To vote for delegates who will then be responsible for securing the network.

Correct answer: To propose and verify new blocks of transactions after being selected based on their economic stake.

In a PoS system, validators are responsible for the core functions of maintaining the blockchain. They are chosen to create new blocks and validate transactions based on the amount of cryptocurrency they have staked as collateral. Unlike PoW miners, they do not compete by solving puzzles. Their stake acts as an incentive to act honestly, as malicious behavior can result in the loss of their staked funds (a process known as 'slashing').

Question 29: What is 'delegatecall' in Solidity, and why is it risky?

A call that transfers ETH to another contract using the caller's gas allowance
A low-level call that executes another contract's code in the calling contract's storage context (Correct answer)
A batched call that groups multiple transactions into one for efficiency
A restricted function call only available to the contract owner

Correct answer: A low-level call that executes another contract's code in the calling contract's storage context

delegatecall runs the target's code but reads and writes the caller's storage slots, so a malicious or buggy implementation can corrupt or drain the proxy's state.

Question 30: Which smart contract pattern separates data storage from business logic to enable upgrades?

Factory pattern
Observer pattern
Singleton pattern
Eternal storage pattern (Correct answer)

Correct answer: Eternal storage pattern

The eternal storage pattern stores all state in a generic key-value contract separate from the logic contract, so logic can be replaced without losing data.

Question 31: In BLS (Boneh-Lynn-Shacham) signatures used in Ethereum 2.0, what key advantage do they offer over ECDSA?

BLS signatures are aggregatable, allowing many signatures to be combined into one compact signature (Correct answer)
BLS works without a public key infrastructure
BLS eliminates the need for a hash function
BLS signatures are shorter than ECDSA by 50%

Correct answer: BLS signatures are aggregatable, allowing many signatures to be combined into one compact signature

BLS signature aggregation lets thousands of validator signatures be combined into a single constant-size signature, drastically reducing on-chain data.

Question 32: A user stores their cryptocurrency private key in a plain text file named `wallet_key.txt` in a public GitHub repository. What is the most immediate and severe consequence of this action?

The network will automatically freeze the funds associated with the key for security reasons.
The user will receive a warning from GitHub to remove the sensitive information.
The user's funds can be immediately and irreversibly stolen by anyone who finds the key. (Correct answer)
An attacker can view the transaction history but cannot initiate new transactions.

Correct answer: The user's funds can be immediately and irreversibly stolen by anyone who finds the key.

A private key is the sole credential that proves ownership and grants the authority to spend cryptocurrency from an address. Exposing it publicly gives anyone who finds it complete and total control over the associated funds. The decentralized nature of blockchain means there is no central authority to reverse transactions or freeze funds once they have been stolen.

Question 33: What is the Polkadot relay chain?

The central chain that provides shared security and interoperability for connected parachains (Correct answer)
A consensus mechanism for private blockchains
A cross-chain bridge for ERC-20 tokens
A sidechain for Polkadot's staking operations

Correct answer: The central chain that provides shared security and interoperability for connected parachains

Polkadot's relay chain is the core blockchain that coordinates consensus, finality, and communication between all the independent parachains in the ecosystem.

Question 34: A consortium of private companies wants to establish a blockchain for supply chain management. They require high transaction throughput, low latency, and a mechanism where block producers are known and trusted entities. Which consensus mechanism is most suitable for this scenario?

Proof of Authority (PoA) (Correct answer)
Proof of Stake (PoS)
Proof of Burn (PoB)
Proof of Work (PoW)

Correct answer: Proof of Authority (PoA)

Proof of Authority (PoA) is ideal for private or consortium blockchains where participants are known and trusted. In PoA, validators are pre-approved entities who stake their reputation, not computational power or coins. This results in high throughput and efficiency, which is perfect for enterprise use cases like supply chain management where performance and accountability are key.

Question 35: What is a 'length extension attack' and which hash function family is vulnerable to it?

An attack on RSA using extended Euclidean algorithm; affects all hash functions
An attack that extends private keys; affects ECDSA
An attack where knowing H(m) lets an attacker compute H(m||extra) without knowing m; affects SHA-1 and SHA-2 (Merkle-Damgård) (Correct answer)
An attack on Merkle trees using extra leaf nodes; affects SHA-3 only

Correct answer: An attack where knowing H(m) lets an attacker compute H(m||extra) without knowing m; affects SHA-1 and SHA-2 (Merkle-Damgård)

Merkle-Damgård construction (SHA-1, SHA-256) is vulnerable to length extension because the internal state after hashing m is exposed in H(m) and can be continued.

Question 36: What factors go into determining the block difficulty in Ethereum?

When the period between mined blocks is less than 10 seconds, the Block Difficulty increases, whereas when the duration is more than 20 seconds, it lowers. (Correct answer)
The Ethereum Committee sets the Block Difficulty every two weeks to match the average number of transactions, and it cannot be affected by the network itself.
When the period between mined blocks is less than 20 seconds, the Block Difficulty increases, while it drops when the duration is more than 60 seconds.

Correct answer: When the period between mined blocks is less than 10 seconds, the Block Difficulty increases, whereas when the duration is more than 20 seconds, it lowers.

Explanation: <br> The mining difficulty of Ethereum is a metric that indicates how tough it is to mine blocks on the Ethereum blockchain. Processing Ethereum transactions necessitates the mining of blocks. The number of active miners on the network determines the mining difficulty.

Question 37: What is a Merkle tree used for in blockchain?

Efficiently verifying the integrity of transaction sets (Correct answer)
Generating new wallet addresses
Encrypting user private keys
Signing blocks with miner identity

Correct answer: Efficiently verifying the integrity of transaction sets

A Merkle tree hashes pairs of transactions recursively, producing a single root hash that lets nodes verify any transaction without downloading the full block.

Question 38: What is the key difference between Proof of Work used on a public blockchain and Proof of Authority used on a private blockchain?

PoW is faster and cheaper than PoA
PoA requires more energy than PoW
PoW requires identity verification for miners
PoA relies on trusted validators while PoW relies on computational competition (Correct answer)

Correct answer: PoA relies on trusted validators while PoW relies on computational competition

PoA uses pre-approved trusted validators making it efficient for private networks, while PoW uses energy-intensive competition open to anyone.

Question 39: A supply chain involving five competing companies wants a shared ledger where all five control validation equally. Which model fits best?

Private blockchain owned by one company
Public blockchain
Sidechain
Consortium blockchain (Correct answer)

Correct answer: Consortium blockchain

A consortium blockchain distributes governance equally among multiple organizations, making it ideal for competing companies collaborating.

Question 40: What is the 'nothing-at-stake' problem in naive Proof-of-Stake implementations?

Validators with no stake can still participate in block validation if their identity is unverified
Validators can vote on multiple competing forks simultaneously at no cost, undermining consensus (Correct answer)
Empty blocks can be added to the chain without validators risking any reward loss
Stakers can withdraw all stake before a slashing event is processed

Correct answer: Validators can vote on multiple competing forks simultaneously at no cost, undermining consensus

Without slashing, validators lose nothing by supporting every fork, making double-spending trivial; modern PoS systems use slashing to penalize equivocation.

Question 41: How does 'griefing' differ from theft in smart contract attacks?

Griefing aims to cause financial loss or inconvenience to others without direct profit to the attacker (Correct answer)
Griefing steals funds but returns them anonymously to avoid detection
Griefing corrupts contract storage permanently unlike theft which is reversible
Griefing only affects gas costs while theft targets token balances

Correct answer: Griefing aims to cause financial loss or inconvenience to others without direct profit to the attacker

Griefing attacks cause harm (wasted gas, locked contracts, failed transactions) as the goal itself rather than as a means to steal funds.

Question 42: Which cryptographic primitive is used in zero-knowledge proofs to allow one party to prove knowledge of a secret without revealing it?

Block ciphers
HMAC functions
Symmetric encryption
Commitment schemes (Correct answer)

Correct answer: Commitment schemes

Commitment schemes let a prover commit to a value and later prove properties about it without disclosing the value itself, forming a foundation for zero-knowledge proofs.

Question 43: A pharmaceutical company uses blockchain to track drugs from manufacturer to pharmacy. What problem does this primarily solve?

Detecting and removing counterfeit drugs from the supply chain (Correct answer)
Replacing FDA regulatory approval
Automating drug discovery research
Reducing marketing costs

Correct answer: Detecting and removing counterfeit drugs from the supply chain

Each drug batch's movement is logged on-chain, making it easy to identify when and where a counterfeit or diverted product entered the chain.

Question 44: A malicious actor gains control of 52% of the total hashing power on a Proof of Work (PoW) network. Which of the following actions can this actor successfully perform?

Create new coins out of thin air, exceeding the protocol's supply limit.
Change the fundamental consensus rules of the blockchain, such as the block reward amount.
Steal cryptocurrency directly from another user's wallet.
Prevent specific new transactions from being confirmed and potentially reverse their own recent transactions. (Correct answer)

Correct answer: Prevent specific new transactions from being confirmed and potentially reverse their own recent transactions.

A 51% attack on a PoW network gives the attacker control over the block creation process. This allows them to censor transactions by refusing to include them in their blocks and to perform a 'double-spend' by creating a secret longer chain where they reverse their own transactions and then broadcasting it to the network. However, they cannot steal funds from addresses they don't own the private keys to, change the core protocol rules, or create coins outside of the established block reward system.

Question 45: What is 'impermanent loss' in the context of providing liquidity to an AMM?

Tokens permanently destroyed when a liquidity pool is drained by a hack
Gas fees lost during failed liquidity addition transactions
The temporary loss in dollar value compared to holding assets, caused by price divergence in the pool (Correct answer)
Slippage incurred when withdrawing liquidity during high volatility

Correct answer: The temporary loss in dollar value compared to holding assets, caused by price divergence in the pool

Impermanent loss occurs when the price ratio of pooled assets changes from deposit time; the LP would have been better off simply holding the assets instead.

Question 46: What is 'smart contract honeypot' and how does it trap attackers?

A fake liquidity pool that simulates high returns to lure attackers into depositing funds
A decoy node that records attacker IPs when they attempt to broadcast invalid blocks
A contract that appears to have an exploitable vulnerability but contains a hidden mechanism that prevents fund withdrawal (Correct answer)
A contract that mimics a vulnerable DAO but triggers a governance lock when exploit code is detected

Correct answer: A contract that appears to have an exploitable vulnerability but contains a hidden mechanism that prevents fund withdrawal

Honeypot contracts appear exploitable (e.g., seemingly exposed funds) but use hidden code to trap attackers' deposited ETH, turning the tables on would-be exploiters.

Question 47: A key difference between Proof of Work (PoW) and Proof of Stake (PoS) lies in how they achieve Sybil resistance. How does PoS primarily prevent a Sybil attack?

By requiring validators to stake their real-world identity and reputation.
By making it economically irrational for an attacker to acquire a majority of the network's staked assets. (Correct answer)
By making computational power prohibitively expensive for an attacker.
By electing a small, trusted group of validators to secure the network.

Correct answer: By making it economically irrational for an attacker to acquire a majority of the network's staked assets.

In Proof of Stake (PoS), validators must lock up a significant amount of the network's native cryptocurrency as collateral. To launch a successful 51% attack, an attacker would need to acquire and stake more than half of the total value of all staked coins. This would be incredibly expensive, and any malicious action could lead to the loss of their staked funds ('slashing'), making such an attack economically unfeasible and irrational.

Question 48: A smart contract is designed to trigger an insurance payout for a flight delay. To function correctly, it needs to know the official landing time of a specific flight. How does a smart contract on a deterministic blockchain typically obtain this type of real-world information?

Through a trusted external data feed service known as a blockchain oracle. (Correct answer)
By using a built-in time function within the EVM to access real-world clocks.
By allowing users to vote on the landing time after the fact.
By directly querying a public flight tracking API from within the contract code.

Correct answer: Through a trusted external data feed service known as a blockchain oracle.

Blockchains and smart contracts cannot directly access off-chain data because it would break the deterministic nature required for consensus. A blockchain oracle is a necessary third-party service that acts as a bridge, fetching and verifying real-world data (like flight times or asset prices) and relaying it to the smart contract in a secure and reliable way.

Question 49: What property ensures that once a block is added to a blockchain, its data cannot be altered without changing all subsequent blocks?

Scalability
Immutability (Correct answer)
Sharding
Interoperability

Correct answer: Immutability

Immutability is the property that makes blockchain data tamper-resistant, since each block's hash depends on the previous block's data.

Question 50: In tokenomics, what is 'vesting'?

The process of burning tokens to reduce supply
A method for staking tokens to earn yields
A schedule that releases tokens to team members or investors gradually over time (Correct answer)
The governance process for minting new tokens

Correct answer: A schedule that releases tokens to team members or investors gradually over time

Vesting is a time-based release schedule for tokens allocated to team members, investors, or advisors, preventing immediate sell-off after a project launches.

Question 51: What is the purpose of BIP-39 mnemonic seed phrases in blockchain wallets from a cryptographic standpoint?

They encode a random entropy value as human-readable words, which deterministically derive wallet keys via PBKDF2 (Correct answer)
They hash private keys into 12 or 24 shorter keys
They encrypt private keys using AES-256
They store public keys as readable text for sharing

Correct answer: They encode a random entropy value as human-readable words, which deterministically derive wallet keys via PBKDF2

BIP-39 converts a random entropy value into a word list and uses PBKDF2-HMAC-SHA512 with the words as input to derive a master seed for HD wallet key generation.

Question 52: What is a 'genesis block'?

The largest block in a blockchain by transaction count
A special block that stores validator credentials
The first block in a blockchain from which all subsequent blocks are chained (Correct answer)
A block used for network upgrades

Correct answer: The first block in a blockchain from which all subsequent blocks are chained

The genesis block is block #0 (or #1) — the very first block in a blockchain, hardcoded at network launch and the foundation of the entire chain.

Question 53: How does a 'vampire attack' work in the DeFi ecosystem?

A new protocol forks a competitor and offers superior incentives to migrate liquidity providers, draining the original protocol (Correct answer)
An attacker drains liquidity pools by exploiting price imbalances across multiple AMMs simultaneously
A bot continuously removes and re-adds liquidity to harvest yield while avoiding impermanent loss
A smart contract siphons a percentage of all swap fees from liquidity pools without LPs noticing

Correct answer: A new protocol forks a competitor and offers superior incentives to migrate liquidity providers, draining the original protocol

Vampire attacks offer outsized token rewards to poach liquidity providers from established protocols, rapidly shifting TVL and user base to the new entrant.

Question 54: Which Ethereum scaling solution uses fraud proofs and requires a challenge period for withdrawals?

ZK-Rollup
State Channel
Optimistic Rollup (Correct answer)
Plasma Chain

Correct answer: Optimistic Rollup

Optimistic Rollups assume transactions are valid by default and rely on fraud proofs during a 7-day challenge window before finality on L1.

Question 55: What is a 'multisig wallet' smart contract, and what problem does it solve?

A contract that splits ETH equally among multiple recipients atomically
A contract requiring M-of-N key holders to approve a transaction before execution (Correct answer)
A wallet that batches transactions to save gas by combining many senders
A wallet that automatically signs transactions using zero-knowledge proofs

Correct answer: A contract requiring M-of-N key holders to approve a transaction before execution

A multisig wallet requires a threshold number of predefined signatories to co-sign transactions, eliminating single-point-of-failure risk for high-value funds.

Question 56: In the context of Ethereum smart contracts, what is 'MEV' (Maximal Extractable Value)?

The upper limit of gas a contract can consume in one transaction
Profit extracted by reordering, inserting, or censoring transactions within a block (Correct answer)
The maximum validator reward for correctly attesting to finalized blocks
The maximum ETH that miners can earn from a single coinbase block reward

Correct answer: Profit extracted by reordering, inserting, or censoring transactions within a block

MEV refers to value that block producers (miners/validators) or searchers can capture by controlling transaction ordering, enabling strategies like arbitrage and liquidations.

Question 57: What is 'front-running' in the context of blockchain transaction ordering?

Broadcasting a transaction on multiple chains simultaneously
Mining empty blocks to delay competitors' transactions
Adding transactions to a block before verifying their signatures
Observing a pending transaction in the mempool and submitting a competing one with higher gas to be processed first (Correct answer)

Correct answer: Observing a pending transaction in the mempool and submitting a competing one with higher gas to be processed first

Front-running exploits the public mempool by inserting a transaction with higher gas fees ahead of a target transaction to capture arbitrage or MEV profits.

Question 58: What is 'gas optimization' and why is it important for smart contract developers?

Reducing network latency so transactions confirm faster on Ethereum
Compressing contract bytecode to reduce the deployment file size on disk
Writing code that minimizes EVM computational steps to lower transaction costs (Correct answer)
Batching validator rewards to reduce the number of payout transactions

Correct answer: Writing code that minimizes EVM computational steps to lower transaction costs

Every EVM opcode costs gas; optimizing code reduces costs for users and can make a contract economically viable where a naive implementation would be prohibitively expensive.

Question 59: What is a 'price oracle manipulation' attack in DeFi?

Spoofing DNS entries to redirect oracle API calls to attacker servers
Bribing oracle node operators to submit false data feeds
Exploiting round-trip latency between on-chain and off-chain price sources
Artificially moving an asset's spot price on a DEX used as a price reference to exploit lending protocols (Correct answer)

Correct answer: Artificially moving an asset's spot price on a DEX used as a price reference to exploit lending protocols

Attackers manipulate the spot price of a token on a DEX (often via flash loans) that a lending protocol uses as an oracle, enabling under-collateralized borrowing.

Question 60: A malicious miner on a Proof-of-Work blockchain successfully mines a block but chooses not to broadcast it to the network. Instead, they immediately start mining the next block on top of their secret one. The goal is to build a longer private chain and release it strategically to orphan blocks found by honest miners. This strategy is known as:

Time-jacking Attack
Finney Attack
Selfish Mining (Correct answer)
Block Withholding

Correct answer: Selfish Mining

Selfish mining is a strategy where a miner or pool keeps newly found blocks secret, aiming to get a head start on mining subsequent blocks. By releasing their longer private chain at an opportune moment, they can invalidate the work of honest miners, thereby increasing their own relative share of mining rewards.

Question 61: What is a commitment scheme in cryptography, and how is it used in blockchain protocols?

A method to bind a value secretly, then reveal it later without being able to change it (Correct answer)
A technique to batch-sign multiple transactions
A way to compress the blockchain state
A legal agreement between miners

Correct answer: A method to bind a value secretly, then reveal it later without being able to change it

A commitment scheme allows a party to commit to a value (hiding it) and later open (reveal) it, with the guarantee it cannot be altered after committing.

Question 62: What is the primary purpose of a DAO (Decentralized Autonomous Organization) smart contract?

To encode governance rules so token holders can vote on proposals without central control (Correct answer)
To create deflationary tokenomics via automatic burns
To automate tax reporting for token holders
To bridge assets between Ethereum and other blockchains

Correct answer: To encode governance rules so token holders can vote on proposals without central control

DAO contracts implement on-chain governance where token holders submit and vote on proposals, with approved actions executed automatically by the contract.

Question 63: Which consensus mechanism requires participants to demonstrate their commitment to the network by permanently destroying a certain amount of cryptocurrency?

Proof of Elapsed Time
Proof of Stake (PoS)
Proof of Burn (PoB) (Correct answer)
Proof of Capacity

Correct answer: Proof of Burn (PoB)

Proof of Burn (PoB) is a consensus mechanism where participants, often called miners or validators, intentionally send cryptocurrency to a verifiably unspendable address. This act of 'burning' coins serves as an economic sacrifice, demonstrating a long-term commitment to the network and granting the right to validate transactions and mine new blocks.

Question 64: In Hyperledger Fabric, what is the role of the 'orderer' node?

To execute chaincode (smart contracts)
To store user identity certificates
To validate node permissions on the network
To establish consensus by ordering transactions into blocks (Correct answer)

Correct answer: To establish consensus by ordering transactions into blocks

The orderer service in Hyperledger Fabric is responsible for collecting transactions, ordering them, and packaging them into blocks for distribution.

Question 65: Which property ensures that a small change in input produces a drastically different hash output, making hash outputs unpredictable?

The avalanche effect (Correct answer)
Collision resistance
Pre-image resistance
Determinism

Correct answer: The avalanche effect

The avalanche effect means that flipping even a single bit in the input causes approximately half the output bits to change.

Question 66: What is the key architectural difference between account-based blockchains and UTXO-based blockchains?

Account-based models use smart contracts; UTXO models cannot
Account-based models are always permissioned; UTXO models are always permissionless
Account-based models track balances in accounts like a bank, while UTXO models track unspent outputs from previous transactions (Correct answer)
UTXO models require more computational power than account models

Correct answer: Account-based models track balances in accounts like a bank, while UTXO models track unspent outputs from previous transactions

UTXO (Unspent Transaction Output) models like Bitcoin track discrete coins from prior transactions, while account models like Ethereum maintain running balances per address.

Question 67: Which of the following best describes a zero-knowledge proof in a blockchain context?

A technique for compressing transaction data
Proving knowledge of information without revealing the information itself (Correct answer)
A method to encrypt block headers
A consensus mechanism for lightweight nodes

Correct answer: Proving knowledge of information without revealing the information itself

A zero-knowledge proof lets a prover convince a verifier that a statement is true without disclosing any underlying secret data.

Question 68: What is 'finality' in blockchain terminology?

The point at which a transaction is considered irreversible and permanently recorded (Correct answer)
The closing of a payment channel
The final audit of a smart contract
The last block ever added to a chain

Correct answer: The point at which a transaction is considered irreversible and permanently recorded

Finality means a transaction can no longer be reversed, altered, or cancelled, giving participants certainty that the record is permanent.

Question 69: What is the 'Merkle tree' used for in the context of smart contracts and NFT whitelists?

Computing gas fees for batch minting
Encoding token URIs for metadata storage
Efficiently verifying membership in a large set without storing the full list on-chain (Correct answer)
Generating random numbers for NFT trait assignment

Correct answer: Efficiently verifying membership in a large set without storing the full list on-chain

A Merkle tree allows a contract to verify whether an address is in a whitelist by checking a small proof against a root hash stored on-chain, saving gas.

Question 70: The Practical Byzantine Fault Tolerance (PBFT) consensus mechanism is known for providing high performance and low-latency transaction finality. What is its primary limitation, making it less suitable for large, open, permissionless blockchains?

The requirement for all nodes to stake a large amount of cryptocurrency.
Slow block confirmation times, often taking several minutes.
High energy consumption due to complex computations.
Its performance degrades significantly as the number of nodes increases due to high communication overhead. (Correct answer)

Correct answer: Its performance degrades significantly as the number of nodes increases due to high communication overhead.

Practical Byzantine Fault Tolerance (PBFT) requires a high volume of messages to be sent between nodes to reach consensus. The communication complexity is O(n^2), meaning the number of messages grows exponentially with the number of nodes (n). This makes it inefficient and unscalable for large, public networks like Bitcoin or Ethereum but very effective for smaller, permissioned systems where the number of validators is known and limited.

Question 71: A DeFi protocol's smart contract has a function that (1) checks a user's balance, (2) sends them their requested funds, and then (3) updates their balance. An attacker exploits this by creating a malicious contract that, upon receiving funds, immediately calls the withdrawal function again before the original call can update the balance. This vulnerability is known as a:

Timestamp Dependence Attack
Integer Overflow Attack
Reentrancy Attack (Correct answer)
Denial of Service Attack

Correct answer: Reentrancy Attack

A Reentrancy Attack occurs when an external call is made to an untrusted contract before the original function resolves its state changes. The malicious contract can then 're-enter' the original function, repeatedly executing a part of it (like a withdrawal) before the state (like the user's balance) is updated. The famous DAO hack of 2016 was a reentrancy attack.

Question 72: In blockchain networks, what is the purpose of a mempool (memory pool)?

A temporary holding area where unconfirmed transactions wait to be selected by miners into a block (Correct answer)
A pool of staked tokens used for validator selection
A database storing all finalized blocks permanently
A caching layer that stores frequently accessed wallet balances

Correct answer: A temporary holding area where unconfirmed transactions wait to be selected by miners into a block

The mempool is each node's local queue of broadcast but unconfirmed transactions awaiting inclusion in the next block.

Question 73: Which attack exploits weak random number generation during ECDSA signing, potentially exposing a private key?

51% attack
Sybil attack
Eclipse attack
Nonce reuse attack (k-value reuse) (Correct answer)

Correct answer: Nonce reuse attack (k-value reuse)

If the same nonce k is used in two different ECDSA signatures, an attacker can algebraically recover the private key from the two signatures.

Question 74: A consortium of international banks plans to create a private blockchain for interbank settlements. They require high transaction throughput, low latency, and the ability to function even if some participating nodes become malicious or faulty. The participants are all known and permissioned entities. Which consensus mechanism would be most suitable for this scenario?

Practical Byzantine Fault Tolerance (pBFT) (Correct answer)
Proof of Stake (PoS)
Delegated Proof of Stake (DPoS)
Proof of Work (PoW)

Correct answer: Practical Byzantine Fault Tolerance (pBFT)

Practical Byzantine Fault Tolerance (pBFT) is well-suited for private or consortium blockchains where participants are known. It provides high throughput, low-latency finality, and is designed to tolerate a certain number of malicious (Byzantine) nodes (up to one-third). Since the banking consortium consists of permissioned entities, pBFT's efficiency and fault tolerance make it an ideal choice.

Question 75: What is the Ethereum Virtual Machine (EVM)?

A cloud server that hosts the Ethereum network
A hardware device for storing ETH securely
A Turing-complete runtime environment that executes smart contract bytecode (Correct answer)
A virtual machine for running Ethereum node software

Correct answer: A Turing-complete runtime environment that executes smart contract bytecode

The EVM is a sandboxed, stack-based virtual machine embedded in every Ethereum node that executes smart contract code deterministically.

Question 76: In a Proof of Work (PoW) consensus mechanism, what is the primary role of 'miners'?

To stake their cryptocurrency to validate transactions.
To vote on network governance proposals.
To compete to solve a complex mathematical puzzle to validate transactions and create new blocks. (Correct answer)
To audit the financial statements of the blockchain project.

Correct answer: To compete to solve a complex mathematical puzzle to validate transactions and create new blocks.

In a Proof of Work system, miners use computational power to solve a complex mathematical problem. The first miner to solve the puzzle gets to add the next block of transactions to the blockchain and is rewarded for their 'work'. This process secures the network and validates transactions.

Question 77: Which of the following is an example of an algorithmic stablecoin?

DAI
TerraUSD (UST) (Correct answer)
Tether (USDT)
USDC

Correct answer: TerraUSD (UST)

TerraUSD (UST) was an algorithmic stablecoin that maintained its peg through an algorithmic relationship with the LUNA token rather than fiat reserves.

Question 78: What does ERC-721 define, and how does it differ from ERC-20?

ERC-721 defines non-fungible tokens where each token has a unique ID; ERC-20 defines fungible tokens (Correct answer)
ERC-721 defines governance voting tokens; ERC-20 defines stablecoins only
ERC-721 defines Layer 2 bridging; ERC-20 defines Layer 1 token wrapping
ERC-721 defines multi-token batches; ERC-20 defines single-token standards

Correct answer: ERC-721 defines non-fungible tokens where each token has a unique ID; ERC-20 defines fungible tokens

ERC-721 tokens are non-fungible — each has a unique tokenId and is not interchangeable — whereas ERC-20 tokens are identical and interchangeable units.

Question 79: What is a 'flash loan attack' and which property makes flash loans uniquely risky?

Quickly withdrawing staked ETH before a slashing event is recorded
Borrowing large uncollateralized sums within one transaction to manipulate prices and repay, possible because atomicity guarantees repayment (Correct answer)
Flooding the network with rapid small loans to exhaust liquidity pools
Borrowing tokens across chains using bridges faster than price oracles update

Correct answer: Borrowing large uncollateralized sums within one transaction to manipulate prices and repay, possible because atomicity guarantees repayment

Flash loans are uncollateralized because they must be repaid in the same transaction; attackers use the temporary capital to manipulate DeFi protocols profitably.

Question 80: In Solidity, what is the difference between 'memory' and 'storage' data locations?

storage is persistent on-chain; memory is temporary and cleared after each call (Correct answer)
storage is only readable; memory is only writable
memory is persistent across transactions; storage is temporary
memory holds contract ETH balance; storage holds token balances

Correct answer: storage is persistent on-chain; memory is temporary and cleared after each call

storage variables persist permanently on the blockchain while memory variables exist only for the duration of a function call and are discarded afterward.

Question 81: Which type of blockchain network restricts participation to pre-approved entities?

Sharded blockchain
Permissioned blockchain (Correct answer)
Public blockchain
Tokenized blockchain

Correct answer: Permissioned blockchain

Permissioned (or private) blockchains require participants to be authorized before joining the network.

Question 82: What is 'signature malleability' and which Bitcoin transaction issue did it enable?

Forging digital signatures by exploiting weak elliptic curve parameters
Extending signature length to exceed block size limits and cause transaction rejection
Reusing the same signature across different transactions on separate chains
Altering a signature's encoding without invalidating it, allowing third parties to change transaction IDs before confirmation (Correct answer)

Correct answer: Altering a signature's encoding without invalidating it, allowing third parties to change transaction IDs before confirmation

Signature malleability let attackers tweak ECDSA signatures to produce valid but different transaction IDs (txids), complicating transaction tracking and was central to the MtGox issues.

Question 83: What does DeFi stand for in the context of blockchain?

Decentralized Finance (Correct answer)
Distributed Fund Index
Delegated Finance Interface
Digital Financial Infrastructure

Correct answer: Decentralized Finance

DeFi stands for Decentralized Finance, referring to financial services built on blockchain networks without traditional intermediaries.

Question 84: In the context of Ethereum, what is the primary purpose of 'gas'?

A protocol for compressing transaction data to save block space.
A token used for voting in network governance proposals.
To act as a unit of measurement for the computational work required to execute transactions and smart contracts. (Correct answer)
To measure the physical energy consumption of the network.

Correct answer: To act as a unit of measurement for the computational work required to execute transactions and smart contracts.

Gas is the unit used to measure the amount of computational effort required to execute specific operations on the Ethereum network. Every transaction or smart contract execution requires a certain amount of gas, and users must pay a fee (the gas fee) in ETH to compensate miners/validators for this computational work and to prevent network spam.

Question 85: A user notices they have received several unsolicited transactions, each for a minuscule amount of cryptocurrency (e.g., 0.00000546 BTC), in their wallet. What is the most likely purpose of this 'dusting attack'?

To advertise a new coin or project by sending small amounts to active wallets.
To clog the network with spam transactions, increasing fees for everyone.
To test if the user's wallet address is active before sending a larger, legitimate payment.
To de-anonymize the wallet owner by tracking how and when this 'dust' is spent with other funds. (Correct answer)

Correct answer: To de-anonymize the wallet owner by tracking how and when this 'dust' is spent with other funds.

The primary goal of a dusting attack is to compromise user privacy. Attackers send tiny amounts of crypto ('dust') to many addresses and then use blockchain analysis to track when this dust is combined with other funds in a transaction. This allows the attacker to link different addresses to a single entity, de-anonymizing the user.

Question 86: Blockchain addresses, or "accounts," are generated in most blockchain designs by:

A PRNG output guaranteed to be unique
Creating a hash based on a cryptographic public key and various meta data (Correct answer)
The most recent block height hash combined with a cryptographic private key
A server/node timestamp added to a PRNG output

Correct answer: Creating a hash based on a cryptographic public key and various meta data

The correct answer: <br> Creating a hash based on a cryptographic public key and various meta data

Question 87: What vulnerability does 'integer overflow' create in Ethereum smart contracts?

The contract runs out of gas and halts execution permanently
Values wrap around to unintended numbers, enabling exploits like minting unlimited tokens (Correct answer)
Transaction signatures become invalid and are rejected
Block timestamps become inaccurate causing ordering issues

Correct answer: Values wrap around to unintended numbers, enabling exploits like minting unlimited tokens

Integer overflow causes arithmetic values to wrap around (e.g., max uint256 + 1 = 0), which attackers exploit to create massive balances from near-zero amounts.

Question 88: What is 'wash trading' in the context of NFT marketplaces and why is it harmful?

Minting identical NFTs on competing chains to confuse buyers about authenticity
Duplicating NFT metadata across multiple platforms to claim royalties multiple times
Using bots to flood NFT listings with fake offers that are withdrawn before settlement
Buying and selling NFTs to oneself or colluders to artificially inflate perceived trading volume and prices (Correct answer)

Correct answer: Buying and selling NFTs to oneself or colluders to artificially inflate perceived trading volume and prices

Wash trading creates false price discovery and misleads buyers about an NFT's value, potentially constituting market manipulation and defrauding investors.

Question 89: In blockchain security, what is an 'eclipse attack'?

Overwhelming a network with encrypted garbage data
Hiding malicious code inside smart contract bytecode
Blocking light from reaching solar-powered mining farms
Intercepting a node's network connections so it only communicates with attacker-controlled peers (Correct answer)

Correct answer: Intercepting a node's network connections so it only communicates with attacker-controlled peers

An eclipse attack isolates a node by controlling all its peer connections, feeding it false information about the blockchain state.

Question 90: How does blockchain technology improve the accuracy of land title registries in the US?

It replaces physical surveys with on-chain measurements
It automatically rezones land based on demand
It creates an immutable, time-stamped chain of ownership transfers eliminating title disputes (Correct answer)
It removes the government's role in property rights entirely

Correct answer: It creates an immutable, time-stamped chain of ownership transfers eliminating title disputes

Recording each ownership transfer on an immutable ledger eliminates conflicting paper records and reduces title insurance costs.

Question 91: What security risk does 'tx.origin' pose compared to 'msg.sender' in Solidity?

tx.origin is deprecated and causes contract compilation failures
tx.origin reveals the original EOA, making phishing contracts able to pass authorization checks (Correct answer)
tx.origin leaks private key data to other contracts in the call chain
tx.origin exposes validator addresses making them targets for slashing

Correct answer: tx.origin reveals the original EOA, making phishing contracts able to pass authorization checks

Using tx.origin for authentication allows malicious intermediary contracts to impersonate the original caller, bypassing security checks.

Question 92: Which lending protocol introduced the concept of 'aTokens' that accrue interest in real time?

Compound
Curve Finance
Aave (Correct answer)
Uniswap

Correct answer: Aave

Aave introduced aTokens (e.g., aDAI, aUSDC) that are minted on deposit and accrue interest in real time directly in the holder's wallet.

Question 93: An attacker creates thousands of pseudonymous nodes on a peer-to-peer blockchain network. The goal is to gain a disproportionately large influence, potentially overpowering honest nodes in consensus or disrupting network routing. What is this type of attack called?

Sybil Attack (Correct answer)
Dusting Attack
51% Attack
Eclipse Attack

Correct answer: Sybil Attack

A Sybil attack is characterized by a single entity creating multiple fake identities (Sybil nodes) to undermine the authority or reputation system of a network. By controlling a large number of these nodes, an attacker can out-vote honest participants or disrupt network operations.

Question 94: A user wants to apply for a loan online. Using a Self-Sovereign Identity (SSI) model built on blockchain, how would the user typically prove their identity and income to the lender?

By sending the private keys to their identity wallet to the lender, granting them temporary access to all identity documents.
By presenting digitally signed, verifiable credentials from trusted issuers (e.g., government, employer) that the lender can cryptographically validate. (Correct answer)
By connecting their social media profiles, which act as a centralized identity provider, to the lender's application portal.
By uploading their physical ID and pay stubs directly to a public, permissionless blockchain for the lender to access.

Correct answer: By presenting digitally signed, verifiable credentials from trusted issuers (e.g., government, employer) that the lender can cryptographically validate.

In a Self-Sovereign Identity (SSI) model, individuals control their own identity data in a digital wallet. Trusted entities (like an employer or government) issue digitally signed "verifiable credentials." The user can then present these credentials to a verifier (the lender) to prove specific claims without necessarily sharing the source documents. The verifier can cryptographically confirm the credential's authenticity and issuer.

Question 95: What problem does the Lightning Network solve for Bitcoin?

It reduces Bitcoin's mining difficulty
It enables fast, low-cost off-chain payments through bidirectional payment channels (Correct answer)
It increases Bitcoin's block size to 10MB
It adds smart contract functionality to Bitcoin

Correct answer: It enables fast, low-cost off-chain payments through bidirectional payment channels

The Lightning Network creates bidirectional payment channels between users so that multiple transactions can occur off-chain, settling only the final balance on Bitcoin's blockchain.

Question 96: How do SPV (Simplified Payment Verification) clients verify transactions without downloading the full blockchain?

By downloading only block headers and using Merkle proofs to verify inclusion (Correct answer)
By trusting a central server's transaction records
By storing only the UTXO set without transaction history
By requesting full blocks only when sending transactions

Correct answer: By downloading only block headers and using Merkle proofs to verify inclusion

SPV clients download block headers and verify that a transaction is included in a block using its Merkle proof path.

Question 97: What is a 'Soulbound Token' (SBT) as proposed by Vitalik Buterin?

A non-transferable NFT permanently linked to a specific wallet as a form of digital identity or credential (Correct answer)
A governance token that grants voting rights proportional to holding duration
A token that gains value automatically over time through built-in inflation mechanics
A token that burns itself after one use to prevent double-spending

Correct answer: A non-transferable NFT permanently linked to a specific wallet as a form of digital identity or credential

SBTs are non-transferable tokens that represent credentials, achievements, or memberships tied to an individual's on-chain identity, similar to a digital resume.

Question 98: A major criticism of the Proof of Work (PoW) consensus mechanism is its high energy consumption. Which of the following consensus mechanisms was primarily designed as a more energy-efficient alternative by replacing computational work with an economic stake?

Proof of Stake (PoS) (Correct answer)
Proof of Authority (PoA)
Proof of Burn (PoB)
Delegated Proof of Stake (DPoS)

Correct answer: Proof of Stake (PoS)

Proof of Stake (PoS) was developed to address the high energy consumption of PoW. Instead of requiring miners to perform energy-intensive computations, PoS selects validators to create new blocks based on the number of coins they hold and are willing to 'stake' as collateral. This method is significantly more energy-efficient.

Question 99: How does Verifiable Random Function (VRF) cryptography contribute to blockchain consensus mechanisms like Algorand?

It creates zero-knowledge proofs for transaction validation
It provides symmetric encryption for block propagation
It allows a node to generate a random output with a proof that it was computed correctly, enabling unpredictable but verifiable leader election (Correct answer)
It replaces hashing with a signature for mining

Correct answer: It allows a node to generate a random output with a proof that it was computed correctly, enabling unpredictable but verifiable leader election

VRFs produce a pseudorandom output and a proof; in Algorand, validators use VRFs to secretly determine if they are selected as block proposers, preventing targeted attacks.

Question 100: What is a 'proxy contract' pattern used for in Ethereum smart contract development?

Reducing transaction fees by batching calls
Enabling upgradeable smart contracts (Correct answer)
Encrypting on-chain data
Bridging assets between blockchains

Correct answer: Enabling upgradeable smart contracts

Proxy contracts delegate calls to an implementation contract, allowing the logic to be upgraded by pointing to a new implementation while preserving storage and address.

Certified Blockchain Expert (CBE)

The Certified Blockchain Expert (CBE) certification by Blockchain Council validates comprehensive knowledge of blockchain technology including architecture, consensus mechanisms, cryptography, smart contracts, dApps, and security — targeting developers, architects, and professionals seeking to demonstrate blockchain expertise.

100

Questions

90 min

Time Limit

60%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds