by the miner nodes which make sure that a transaction is valid.
by every single node in the blockchain network executing the same transaction.
by a cryptographic secure signature algorithm called ECDSA which makes sure that cheating is impossible.

Answer(s): B

Show Answer Next Question

QUESTION: 2

Smart Contracts can be written in:

Java, C++, Solidity and JavaScript, because the Ethereum Blockchain is completely language agnostic and cross compilers exist for every major language.
Solidity, Viper, LLL and Serpent, because those are high level languages that are compiled down to bytecode.
Solidity and JavaScript, because those are the official first implementations for Distributed applications and the Blockchain supports those languages fully.

Answer(s): B

Show Answer Next Question

QUESTION: 3

Solidity gets compiled:

to bytecode that can't be understood by humans.
to bytecodes which are essentially opcodes running instruction by instruction.

Answer(s): B

Show Answer Next Question

QUESTION: 4

Having a bug-bounty program early on:

can help to engage the community in testing your smart contracts and therefore help to find bugs early.
might be a burden as it is an administrative overhead mainly.
is completely useless. Who wants to test beta-ware software? It’s better to start with the bug-bounty program after the contract is released on the main-net.

Answer(s): A

Show Answer Next Question

QUESTION: 5

Which is the right order for Denominations?

Wei, Finney, Szabo, Ether, Tether.
Finney, Szabo, Mether, Gwei.
Gwei, Szabo, Finney, Ether.

Answer(s): C

Show Answer Next Question

Download PDF Next Page

Viewing page 2 of 22
Viewing questions 6 - 10 out of 102 questions

Post your Comments and Discuss Blockchain CBDE exam prep with other Community members:

Comments:

Name:

CBDE Exam Discussions & Posts
CBDE AI Verifications

PktLoss on: June 29, 2026
The exam was pretty stressful. Luckily the practice questions really helped me out.
Canada

PktLoss on: July 28, 2026
This exam stress man. Good thing these questions helped a lot.
Switzerland

Symlink on: August 19, 2026
This exam was so stressful. The prep material here really helped calm me down.
Portugal

Systemd on: July 13, 2026
Squeezed in quick study sessions after work with the help of this site and nailed the cert like I wasn't even stressing.
Estonia

Payload on: July 15, 2026
I was unsure at first but the practice questions on this website really helped me learn.
Canada

Bitmask on: July 13, 2026
Crammed a ton but saved time and money getting through this test easy.
Argentina

Strace on: June 23, 2026
This exam was tough but these questions helped.
Denmark

Runlevel on: September 21, 2026
Crammed with this website saved me time and money got the cert.
Malta

Fiber on: August 29, 2026
Balancing work and studying was tough but getting through the exam with short study sessions was such a relief.
Ireland

Loopback on: August 29, 2026
Was shaky at first but practice questions helped.
Mexico

Synack on: August 20, 2026
Was kinda slow at first then I review more and pass finally.
Spain

Parity on: August 25, 2026
Man this exam went way deeper than I thought. The AI assistant on this site helped a lot to fill in the gaps.
Chile

Hexdump on: August 03, 2026
The exam was harder than I thought. AI assistant here really helped a lot.
Luxembourg

Shebang on: June 19, 2026
Work was crazy but these questions saved time.
Greece

Synack on: July 22, 2026
Crammed with the practice questions here save me so much money and I pass this exam slowly but surely.
Panama

Socket on: September 23, 2026
I crammed with this website and saved some time and money and slowly got through the exam.
UAE

Paging on: August 12, 2026
Practice questions made this exam less scary.
Slovenia

Grep on: July 05, 2026
I was worried this exam would be tough but the practice questions helped. Glad that's done now.
Switzerland

Subnet on: July 02, 2026
This cert was super tough but those practice questions saved me.
Cyprus

Microcode on: August 08, 2026
Between work and cramming I could finally relax after passing this cert.
Ireland

Chmod on: September 08, 2026
I took my time with prep but in the end reviewing it all paid off and I passed.
Norway

Bashrc on: August 23, 2026
The exam was tougher than I thought but the practice questions here made it doable.
Canada

Pids on: August 09, 2026
Practice questions make me confident.
Norway

Bgp on: July 31, 2026
This exam was tougher than I thought with way more stuff to cover. The AI assistant here actually helped a lot in understanding tricky topics quickly.
Austria

Hashmap on: September 07, 2026
Working long hours I squeezed in quick study sessions got it done.
Switzerland

Synack on: September 01, 2026
Slow progress but passed eventually.
Canada

Hotfix on: July 28, 2026
Progress was slow but I passed.
France

Packet on: June 09, 2026
Exam was tough but manageable with good prep.
Taiwan

Vlan on: July 28, 2026
Didn't feel ready but practice questions helped.
Italy

Endianness on: September 10, 2026
This exam was tough but doable.
Spain

Packet on: September 16, 2026
This exam was tougher than I thought with more topics packed in. The AI assistant here actually helped me clarify and organize what I needed to focus on.
UAE

Replica on: August 08, 2026
I juggle work and study sessions just happy this website's practice questions helped me pass.
Netherlands

Kmem on: July 01, 2026
Was crazy at work but passed it.
UAE

Pip on: July 30, 2026
Man this exam was tough but the practice questions got me through. Just glad I passed honestly.
Austria

Symlink on: July 07, 2026
Crammed real hard with these questions saved me time and cash for sure.
Qatar

Paging on: July 18, 2026
That exam was a monster but practice questions here eased the stress. I felt sorta ready thanks to this prep.
Netherlands

Nullptr on: September 07, 2026
Exam was stressful. Prep material helped me.
Spain

Socket on: June 29, 2026
Getting through this cert slowly was a breeze with their AI assistant and saved me time money craming.
Costa Rica

Tarball on: August 28, 2026
The exam was killer but this website had some solid practice questions. Feels good to be done with that stress.
Belgium

Hexdump on: August 01, 2026
Saved me time and money got through the exam.
Portugal

Synack on: July 13, 2026
The exam was harder than I thought but still doable with these questions.
Israel

Hardlink on: August 22, 2026
Slow going but review time paid off.
Denmark

Bootload on: August 17, 2026
At first I wasn't confident but going through relevant questions on this site really helped me understand better.
Brazil

Bytecode on: August 27, 2026
This exam was tricky and had stuff I didn't expect but the AI assistant on this site saved me a lot. It felt like having a buddy help me out when stuck.
Spain

Deadlock on: June 27, 2026
Exam was stressful. Glad this site's prep helped.
Liechtenstein

Nullptr on: July 07, 2026
Started unsure but practice questions helped.
Netherlands

Sysctl on: July 21, 2026
Didn't feel confident at first but the practice questions here really helped me learn.
Latvia

CoreDump on: July 01, 2026
Was worried at first but practice questions helped.
Hong Kong

Loopback on: September 13, 2026
Saved me time and money cramming super slow got through the exam.
Luxembourg

Fiber on: August 01, 2026
Study short during breaks man was it a relief.
Israel

AI Explanation - verified by ricabrica on: September 25, 2026
Question 35:
Question 35 — correct choice: serverless API
The answer key marks D, but based on the options shown, I believe that is incorrect. The requirements describe a serverless API deployment:

Key-based authentication: Provides an endpoint secured with API keys.

Real-time REST access: Supports online inference through an HTTP/REST endpoint.

No VM vCPU quota consumption: Microsoft hosts and manages the underlying infrastructure, so your subscription’s VM quota isn’t used.

Why the other choices are unsuitable:

Batch: Intended for asynchronous, large-volume processing rather than real-time requests.

Self-hosted container: You manage the infrastructure and typically need compute resources and quota.

Standard: This is not the clearest deployment type for the stated requirements; the specific Foundry option is serverless API.

The explanation in the dump appears to describe serverless API while labeling it as “standard,” which likely caused the answer mismatch.
Munich, Germany

AI Explanation - verified by User2425 on: September 29, 2026
Question 17:
Correct answer: C. Firewalls
Firewalls primarily control network traffic between security zones, such as the internet and an internal network. They are useful against external attacks, but they are not particularly effective against insiders who already have authorized access to systems or data.
The other controls directly address insider risk:

Least privilege: Limits users to only the access necessary for their job.

Background checks: Help identify potentially risky individuals before employment.

Separation of duties: Ensures that one person cannot complete a sensitive process alone, reducing fraud and abuse.

The answer key’s C is correct.
Rota, Spain

AI Explanation - verified by User2474 on: September 10, 2026
Question 30:
Correct answer: D — Building and training a generative AI model from scratch using customer-owned data.
The Generative AI Security Scoping Matrix reflects how much control—and therefore security responsibility—the customer has:

Third-party enterprise application with embedded AI: The provider manages most security controls. The customer mainly manages users, data, and configuration.

Application using an existing third-party FM: The customer controls the application and its inputs/outputs, but the provider controls the underlying model and infrastructure.

Fine-tuning a third-party FM: The customer has additional responsibility for training data, data protection, and model behavior, but still depends on the provider’s base model and platform.

Building and training a model from scratch: The customer controls the model, training data, application, deployment, and many security safeguards. This creates the greatest security ownership.

This does not mean the customer manages every physical infrastructure control—the cloud provider still handles its underlying infrastructure responsibilities. It means the customer has the broadest scope of application, model, data, and deployment security responsibilities.
Kenitra, Morocco

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 198:
Correct answers: A — Namespace and B — Time
The Checkpoints tab in the Developer Console shows information about checkpoints captured during Apex execution, including:

Namespace: The namespace associated with the code where the checkpoint was set.

Time: When the checkpoint was captured or executed.

The other options are not the best choices:

Exception: Exceptions are viewed through debug logs or execution results, not as the primary Checkpoints tab information.

Debug Statement: System.debug() output belongs in the Logs tab. A checkpoint captures program state, such as variables and their values, at a specific point in execution.

Chennai, India

AI Explanation - verified by User9379 on: September 21, 2026
Question 79:
Correct answer: Code signing (B)
Code signing uses a digital signature to prove that software came from the claimed author and has not been modified since it was signed.
In this scenario, an attacker could repackage the software and add malware. If users verify the author’s digital signature before installing it, the modified package will fail signature validation.
Why the others are incorrect:

Input validation: Prevents malicious or malformed input within an application; it does not authenticate a software package.

Secure cookies: Protect web-session cookies; they do not protect downloadable software.

Fuzzing: Tests software by supplying unexpected input to find vulnerabilities; it does not verify software integrity.

The website’s exclusive control helps protect the download location, but code signing provides end-to-end integrity verification even if the file is copied or altered elsewhere.
Biloxi, United States

AI Explanation - verified by User3021 on: September 20, 2026
Question 6:
The correct answers are C and D:

Report on the discount approval time for quotes

If opportunities increasingly require discounts, slow approval cycles can delay closing. A report can show whether quote approval time has increased.

Dashboard of opportunity stage duration

This shows how long opportunities remain in each sales stage. Management can identify the stage where opportunities are now taking longer than usual.
The other options are less relevant:

Lead conversion trends measure lead-generation effectiveness, not opportunity closing time.

Campaign ROI evaluates marketing performance, not delays in the sales process.

Warsaw, Poland

AI Explanation - verified by User3428 on: September 26, 2026
Question 67:
Correct answer: False (B).
ServiceNow configuration can affect what other users see on forms. For example, an administrator’s changes to:

Form layout

Related lists

Dictionary settings

UI policies

Client scripts

Views and field visibility

may apply to many or all users.
The important distinction is:

Personalization usually affects only the individual user.

System configuration can affect other users, depending on its scope and conditions.

Therefore, the statement “Configuration will not affect what others see” is incorrect.
Bengaluru, India

AI Explanation - verified by User8125 on: September 09, 2026
Question 49:
La risposta corretta è C. DRP (Disaster Recovery Plan).
Un DRP descrive le procedure da seguire dopo un disastro per ripristinare sistemi, infrastrutture e servizi essenziali. Nel caso della municipalità, il tornado ha distrutto il data center principale, quindi il personale deve attivare il piano di disaster recovery, ad esempio utilizzando un sito alternativo o sistemi di backup.
Le altre opzioni:

BCP (Business Continuity Plan): è più ampio e mira a mantenere le funzioni essenziali dell’organizzazione durante un’interruzione. Il DRP è una componente più specifica del BCP.

Communication plan: stabilisce come comunicare con dipendenti, cittadini e altre parti interessate, ma non ripristina i sistemi.

IRP (Incident Response Plan): gestisce la risposta iniziale a un incidente di sicurezza, come un attacco informatico, non principalmente il recupero da un disastro fisico.

Da ricordare: DRP = ripristino dopo un disastro; BCP = continuità complessiva delle attività.
Rome, Italy

AI Explanation - verified by 8vot4a8c9g on: September 16, 2026
Question 45:
Question 45’s stated answer appears to be wrong. The answer key selects D, but based on the equivalence classes shown in the explanation, B is the correct choice.
The four classes are:

x = -100

-100 < x < 100

100 = x < 1000

x = 1000

Option B gives:

-500 ? class 1

0 ? class 2

100 ? class 3

1000 ? class 4

Thus, it supplies one representative value from every equivalence class.
Option D (-1000; -100; 100; 1000) does not cover the second class, because -100 belongs to the first class (x = -100).
Correct answer: B, assuming the class definitions in the page explanation are accurate. The explanation’s claim that D includes 500 and 1500 also conflicts with the values actually listed for D.
Hyderabad, India

AI Explanation - verified by User9046 on: September 27, 2026
Question 154:
The answer key shows B, but I believe the better answer is A — Establishment of accountability.
An information security governance program defines:

Who owns security risks and decisions

Who is responsible for implementing controls

Who reports security performance to management

How security responsibilities align with business objectives

Accountability is fundamental because security cannot be managed effectively if ownership is unclear. Compliance and audit readiness are valuable outcomes, but they are not the primary purpose of governance.
Why the other options are weaker:

B — Compliance with audit requirements: Governance may support compliance, but audit compliance is not its main objective.

C — Monitoring security incidents: This is an operational security activity, not the central purpose of governance.

D — Creation of tactical solutions: Governance establishes direction and oversight; tactical solutions belong to management and operational teams.

So, based on standard ISACA governance principles, A is more defensible than the stated answer B.
Caloocan, Philippines

AI Explanation - verified by User3169 on: September 12, 2026
Question 1:
Correct answer: B. Transfer
Buying cyber insurance transfers some of the financial risk to a third party—the insurance provider. If a covered incident occurs, the insurer may help pay for recovery, legal costs, notifications, or other losses.

Accept: Acknowledge the risk and take no additional action.

Transfer: Shift the risk or financial impact to another party, such as through insurance or a contract.

Mitigate: Reduce the likelihood or impact using controls, such as firewalls, training, or backups.

Avoid: Eliminate the activity that creates the risk.

Insurance does not remove the cyber risk itself; it primarily transfers the financial consequences.
Jonesboro, United States

AI Explanation - verified by User8057 on: September 16, 2026
Question 184:
The answer key appears incorrect. “Escape to host” is not a suitable answer.

Escape to host: A virtualization attack where code escapes a guest VM and accesses the host system. Nothing in the scenario mentions virtualization.

Browser extension: Can redirect or manipulate web-browser traffic, but not normally database-server traffic.

Valid accounts: Describes using stolen or compromised credentials, not redirecting network traffic.

Process injection: Injecting malicious code into a legitimate database or networking process could allow an attacker to alter how that process handles outgoing traffic.

If forced to choose from these options, B. Process injection is the closest answer, although the question is poorly written. A more technically precise MITRE ATT&CK technique would likely involve traffic redirection/interception or proxying, depending on how the attacker achieved it—not “escape to host.”
Chicago, United States

AI Explanation - verified by User5977 on: September 14, 2026
Question 1:
Correct answer: A
The Lambda function should:

Write a structured log entry to CloudWatch Logs containing:

- API operation name - HTTP response code - Application version extracted from the User-Agent header

Create a CloudWatch Logs metric filter that:

- Matches the log entries - Increments a metric for each operation - Uses response code and application version as metric dimensions
This produces metrics such as:

text ApiRequests Operation=GetOrders ResponseCode=500 Version=2.4.0

This allows the company to monitor each API operation separately for every response code and application version.

B is incorrect: CloudWatch Logs Insights queries analyze logs but do not directly publish metrics in this manner.

C is incorrect: ALB access logs do not contain arbitrary Lambda response metadata as custom fields.

D is incorrect: X-Ray traces and insights are not the appropriate mechanism for creating these custom, dimensioned application metrics.

New York, United States

AI Explanation - verified by User3666 on: September 20, 2026
Question 27:
Correct answer: No. The answer key is correct.
Question 27 asks whether recommending Azure Multi-Factor Authentication (MFA) will ensure administrative credentials are encrypted during automated Azure deployments.

MFA adds an additional authentication factor, such as a phone notification or verification code.

It helps prevent unauthorized sign-ins, even if a password is compromised.

It does not encrypt, store, or protect credentials used by deployment processes.

A more suitable solution would be Azure Key Vault, which securely stores secrets, passwords, certificates, and keys. An automation process can retrieve the credentials from Key Vault without exposing them directly in deployment scripts or templates.
Therefore, MFA improves authentication security, but it does not meet the requirement to encrypt and protect deployment credentials.
Bradenton, United States

AI Explanation - verified by User7860 on: September 10, 2026
Question 27:
Correct answer: A. Trusted devices
A trusted device solution registers or recognizes an employee’s approved device and can allow access with fewer login prompts. This supports:

Remote and global work: Access is based on the approved device, not a specific office or geographic location.

Seamless login: Users may not need to repeatedly enter credentials on a recognized device.

Limited equipment: It uses devices employees already have rather than requiring separate hardware.

Why the others are less suitable:

Geotagging: Restricts access based on location and may prevent legitimate remote work.

Smart cards: Require issuing and managing additional physical equipment.

Time-based logins: Limit access by time and do not provide a seamless authentication experience.

New York, United States

AI Explanation - verified by User3133 on: September 21, 2026
Question 54:
Correct answer: C — Guardrails for Amazon Bedrock
Guardrails for Amazon Bedrock help control both the input prompts and model responses. The company can configure safeguards such as:

Filtering harmful or inappropriate content

Blocking specified topics

Detecting and masking sensitive information

Enforcing content policies suitable for children

Why the others are incorrect:

Amazon Rekognition analyzes images and videos; it does not control text generated by a language model.

Amazon Bedrock playgrounds are for testing models and prompts, not enforcing production safety policies.

Agents for Amazon Bedrock help models complete tasks and use tools; they do not primarily provide content-safety controls.

For exam questions involving safe, age-appropriate, or policy-compliant Bedrock output, look for Guardrails for Amazon Bedrock.
Bangkok, Thailand

AI Explanation - verified by User2158 on: September 14, 2026
Question 3:
Question 3 is a network-infection investigation hotspot. You’re expected to inspect the logs on each host and the firewall, then determine:

Which host first communicated with the suspected malicious source

Whether that host initiated suspicious traffic or merely received it

Which other hosts show evidence of infection, such as connections from the originating host

Which hosts have no related suspicious activity and are therefore clean

The answer key marks A, but the actual host/firewall images and log details are not visible here, so I can’t independently verify that selection. The correct reasoning is to identify the earliest infection event, not simply the host with the most alerts.
Typical evidence to look for includes:

An outbound connection to a suspicious external address

A downloaded or executed malicious file

Later lateral connections from that host to other internal systems

Firewall logs showing the direction and timing of the traffic

If you provide the screenshots or transcribe the logs for each host and the firewall, I can walk through the infection path and verify the hotspot answer.
Québec, Canada

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 199:
Correct answers: B and C

B — Both inner and outer classes can be declared as with sharing.

An outer class and its inner class can each explicitly specify their own sharing behavior.

C — Inner classes do not inherit sharing settings from the container class.

An inner class has an independent sharing declaration. If its behavior matters, declare with sharing or without sharing explicitly.
Example:

apex public with sharing class OuterClass { public with sharing class InnerClass { // Explicitly uses sharing rules } }

with sharing enforces record-level sharing rules, but it does not automatically enforce object permissions or field-level security.
Chennai, India

AI Explanation - verified by User9594 on: September 23, 2026
Question 26:
Correct answer: C. Red team
A red team acts as an attacker and performs authorized attacks against systems to determine whether a known vulnerability can actually be exploited. This validates the vulnerability’s real-world impact.

Red team: Offensive security; attempts exploitation and simulates attackers.

Blue team: Defensive security; monitors, detects, and responds to attacks.

Purple team: Combines red- and blue-team activities to improve defenses, but is not the best direct answer here.

White team: Usually oversees or coordinates an exercise, including rules of engagement and scope.

The key phrase is “determine whether systems can be exploited”—that points to offensive testing by the red team.
San Jose, United States

AI Explanation - verified by User9453 on: September 06, 2026
Question 63:
Correct answer: B — A packet capture tool was used to steal the password.
Telnet sends login credentials across the network in plaintext. An attacker who captures the traffic with a packet analyzer can read the server administrator’s username and password, then use those credentials to log in and install malware.
Why the other options are less likely:

Password spraying: Tries a few common passwords against many accounts; no indication of repeated login attempts.

Remote-access Trojan (RAT): Could install malware, but it does not explain how the attacker obtained the administrator’s credentials.

Dictionary attack: Tries words or common passwords against an account; again, the scenario specifically highlights Telnet’s lack of encryption.

The key exam concept is: Telnet is insecure because it does not encrypt authentication data. Use SSH instead.
Fayetteville, United States

AI Explanation - verified by User1675 on: September 15, 2026
Question 37:
Question 37: Correct answer — B, with two spaces.
Terraform’s style convention is to indent each nested level by two spaces relative to the surrounding level. For example:

hcl resource "aws_instance" "example" { ami = "ami-123456" tags = { Name = "example" } }

Here, ami and tags are indented two spaces inside the resource block, while Name is indented an additional two spaces inside the tags map.
Terraform’s fmt command automatically applies this formatting:

bash terraform fmt

The other choices—tabs, three spaces, and four spaces—do not follow Terraform’s standard formatting convention.
Lagos, Nigeria

AI Explanation - verified by User3039 on: September 14, 2026
Question 13:
Correct answer: No
The answer key shows B, and it is correct.

Azure Cosmos DB is a globally distributed NoSQL database service. It stores and retrieves application data, but it does not provide the complete environment for building, testing, and deploying predictive analytics models.

Azure Machine Learning is the appropriate service for this requirement. It supports creating experiments, training and testing models, and deploying them for predictions.

Azure Machine Learning Studio provides the browser-based interface for these tasks.

Therefore, recommending Azure Cosmos DB does not meet the requirement.
Wan Chai, Hong Kong

AI Explanation - verified by User2290 on: September 11, 2026
Question 3:
Correct answer: No. The answer key shows B, and that is correct.

The requirement is an assessment of the Azure environment’s design, which requires a support plan offering proactive architectural guidance.

Premier support would provide this capability, but it is a high-cost option.

Since the requirement says to minimize expenses, Premier is not the best recommendation.

A lower-cost plan with the required advisory/design-review capability—historically Professional Direct in Azure’s support-plan model—would be more appropriate.

Therefore, subscribing to Premier satisfies the functionality but fails the cost-minimization requirement.
Bengaluru, India

AI Explanation - verified by ajaykamath69055 on: September 22, 2026
Question 15:
Correct answer: A — ACID transactions
Delta Lake adds ACID transaction support to data lakes. This provides:

Atomicity: a write fully succeeds or does not appear.

Consistency: table state remains valid.

Isolation: concurrent operations do not corrupt one another.

Durability: committed changes persist.

This is a major advantage over a basic data lake, where simultaneous reads and writes can result in incomplete or inconsistent data.
Why the others are less suitable:

Flexible schemas: common data lakes often support flexible or schema-on-read data.

Open-source formats: common data lakes commonly use open formats such as Parquet.

Scalable storage: cloud data lakes already provide scalable storage.

The key distinction is that Delta Lake provides database-like reliability while retaining data-lake scalability and open storage.
Chiyoda City, Japan

AI Explanation - verified by User6155 on: September 21, 2026
Question 29:
Correct answer: D — Plan Human Resource Management
Organizational theory explains how people, teams, and organizational units behave and interact. It helps the project manager design an effective project organization by considering:

Reporting relationships

Organizational structures

Leadership styles

Team maturity

Individual and group behavior

Communication and motivation

In Plan Human Resource Management, the project manager identifies and documents project roles, responsibilities, required skills, reporting relationships, and the staffing management plan. Organizational theory supports this planning work.
Why the other options are less appropriate:

Acquire Project Team: Focuses on obtaining the people needed for the project.

Develop Project Team: Focuses on improving team skills, relationships, and performance.

Manage Project Team: Focuses on tracking performance, resolving issues, and managing changes within the team.

Organizational theory may influence those processes, but in the PMI process framework it is specifically listed as a tool and technique for Plan Human Resource Management.
Johannesburg, South Africa

AI Explanation - verified by User3085 on: September 21, 2026
Question 40:
Correct answer: B — Transitioning the platform to an IaaS provider
IaaS can satisfy all three requirements:

50% memory utilization baseline: The environment can be provisioned with excess capacity, leaving room for growth and workload spikes.

Storage scalability: Cloud storage can generally be expanded as needed without redesigning the physical platform.

Single circuit failure resilience: A properly designed IaaS provider uses redundant power circuits and infrastructure, so failure of one circuit should not take the platform offline.

Why the other options are weaker:

A — Dual PDUs: Helps with power redundancy but does not provide storage scalability.

C — Network load balancing: Provides network-path resilience, not memory or storage scalability, and does not address a power-circuit failure.

D — Multiple NAS devices: May improve storage capacity, but does not inherently provide power resilience or the required compute-capacity baseline.

Atlanta, United States

AI Explanation - verified by User8874 on: September 17, 2026
Question 11:
Correct answer: A — False positive
A false positive occurs when a security tool reports a vulnerability or threat that does not actually exist on the scanned system.
In this question:

The vulnerability scan identifies a vulnerability.

The administrator verifies that the vulnerability is not present.

Therefore, the scan produced a false positive.

For comparison:

True positive: A vulnerability is reported and genuinely exists.

False negative: A vulnerability exists, but the scan fails to detect it.

True negative: No vulnerability exists, and the scan correctly reports no issue.

Woodbridge, United States

AI Explanation - verified by User5938 on: September 26, 2026
Question 21:
The answer key shows B and C, but the question appears flawed because three cash flows are relevant when calculating the yield to maturity/cost of redeemable debt:

Annual interest payments net of tax relief (A): future cash outflows for the issuer.

Redemption value (B): the final cash outflow when the bond is redeemed.

Market value now (C): the cash proceeds received now, acting as the initial cash flow in the IRR calculation.

The nominal value now (D) is not normally used because the debt is issued or traded at its current market value, not necessarily its nominal value. The conversion premium (E) is irrelevant unless the bond is being valued as a convertible.
So, if the question genuinely requires only two answers, B and C match the supplied key, but economically A is also a relevant cash flow.
Maseru, Lesotho

AI Explanation - verified by User1290 on: September 10, 2026
Question 33:
Correct answer: C — A logical interface used for the routing of VLANs
An SVI (Switched Virtual Interface) is a virtual Layer 3 interface associated with a VLAN. It is not a physical port.
For example, a Layer 3 switch might use:

VLAN 10 for data

VLAN 20 for voice

Each VLAN can have its own SVI, such as a default gateway for devices in that VLAN. The switch can then perform inter-VLAN routing while keeping voice and data traffic logically separated.
Why the others are incorrect:

A: Describes physical trunking or logical switch ports, not an SVI.

B: An SVI can provide management access, but that is only one use—not the best description here.

D: SVI use is not related to running out of physical ports.

Quezon City, Philippines

AI Explanation - verified by User8379 on: September 22, 2026
so the correct answer is ?
The correct three selections are:

Admin access to the deployment pipeline

Contributor access to the Development and Test workspaces

Viewer access to the Production workspace

So, using the option order shown, the answer is B, D, and E.
The displayed key, B and E, is incomplete because the developers also need Viewer access to Production to view production items. They should not have Contributor access there, since that would allow modifications or deployments to Production.
Delhi, India

AI Explanation - verified by User6282 on: September 15, 2026
Question 18:
Correct answer: B — ODBC
Power BI Desktop does not provide a dedicated Cassandra connector in the scenario. Cassandra can still be accessed through an ODBC driver:

Install a Cassandra-compatible ODBC driver.

Configure a data source name (DSN), if required.

In Power BI Desktop, select Get Data > ODBC.

Choose the configured DSN and connect.

Why the other options are incorrect:

Microsoft SQL Server database: Connects to SQL Server, not Cassandra.

OLE DB: Requires a compatible OLE DB provider; this is not the standard choice for Cassandra in Power BI.

OData: Requires Cassandra data to be exposed through an OData service, which is not the normal direct connection method.

The answer key’s B is correct because ODBC provides the generic connectivity layer between Power BI and Cassandra.
Nandyal, India

AI Explanation - verified by User8693 on: September 07, 2026
Question 172:
For Question 172, the answer key’s A is the stronger answer—not B.
A. Implement access controls and encryption.
Because the company already processes and stores sensitive data, its first priority should be protecting that data through:

Access controls — ensuring only authorized users can access it.

Encryption — protecting the data if it is intercepted or exposed.

B. Training on data protection policies is important for compliance, but training alone does not directly secure the stored sensitive data. It would typically follow the establishment of essential technical safeguards.
Lagos, Nigeria

AI Explanation - verified by User4651 on: September 14, 2026
ok mulai sekrang anda terjemahkan juga soalnya ketika saya tanya yaa
Baik. Mulai sekarang, ketika Anda menanyakan suatu soal, saya akan:

Menerjemahkan soal ke bahasa Indonesia.

Menyebutkan jawaban yang benar.

Menjelaskan alasan jawaban tersebut.

Memberi tahu jika kunci jawaban yang tersedia tampaknya keliru.

Menjelaskan istilah teknis penting dalam soal.

Untuk soal yang memiliki gambar atau log yang tidak terlihat, saya akan meminta Anda mengunggah gambar atau menyalin informasinya terlebih dahulu.
Surabaya, Indonesia

AI Explanation - verified by joatan.fontoura on: September 21, 2026
Question 58:
Correct answer: A — Because SIR is a scoped application, roles and script includes begin with the sn_si prefix.
The answer key’s B appears incorrect. sn_si is the application’s scope/namespace prefix, used to distinguish Security Incident Response records, roles, scripts, and other application artifacts from those belonging to other applications.

sn_si_admin is an SIR administrator role.

The prefix helps prevent naming conflicts between applications.

It does not refer to a “Secure Identity token” or an instance security check.

For the exam, associate prefixes such as sn_si with scoped application namespaces.
Sapiranga, Brazil

AI Explanation - verified by User1890 on: September 27, 2026
Question 28:
Question 28 is testing the difference between a semantic model (dataset) and a report.

Dataset file: Use Import mode. Excel files are imported into Power BI, and the two Sales tables can be combined with Power Query.

Report file: Use a live connection to the published dataset. This keeps the report separate from the dataset and avoids importing the data again.

Therefore, the intended mapping in answer A is likely:

Report file: DirectQuery/live connection

Dataset file: Import

The important concept is that the dataset owns the imported data and transformations, while the separate report connects to that published dataset. This allows the dataset and report to be published and managed independently. Note that the image containing the exact drag-and-drop labels is unavailable, so the precise displayed mode name for the report may be live connection rather than DirectQuery.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User4114 on: September 12, 2026
A highly regulated financial institution wants to use Gemini as the core decision engine for a loan approval system that will deterministically approve or reject loan applications based on a strict set of predefined criteri Why is this an inappropriate use case for Gemini? Gemini cannot integrate with required financial databases. Gemini is not equipped to handle structured numerical data for financial assessments. Gemini is designed for flexible content generation and inference, not rigid rule-based decisions. Gemini deployment for this scenario would be too expensive and complex.
Correct answer: Gemini is designed for flexible content generation and inference, not rigid rule-based decisions.
Gemini can analyze financial information, summarize applications, or assist loan officers. However, it is probabilistic and may produce variable outputs, so it should not be the authoritative engine for decisions requiring:

Deterministic approve/reject results

Strict adherence to predefined rules

Consistent, reproducible outcomes

Auditability and regulatory compliance

A traditional rules engine or explicitly programmed decision system is more appropriate for the final loan decision. Gemini could assist around that system—for example, extracting information from documents—but should not replace the deterministic approval logic.
Central, Hong Kong

AI Explanation - verified by User6020 on: September 23, 2026
Question 132:
Correct answer: C — Cost of components purchased
A transfer price is the price charged when one division supplies another division within the same company.
For the supplying division:

Operating profit is affected because transfer price determines internal sales revenue.

Return on investment (ROI) is affected because ROI depends partly on operating profit.

Sales revenue is affected because the division records revenue from transferring its output.

Cost of components purchased is not affected by the transfer price. These are input costs paid to external suppliers and are based on the supplier’s price.

Therefore, the transfer price affects the division’s reported performance but does not change the actual external cost of components purchased.
Maseru, Lesotho

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 123:
Correct answer: A — Market skimming
Market skimming is a pricing strategy where a business:

Sets a high initial price for a new product.

Targets customers willing to pay more, often called early adopters.

Gradually reduces the price to attract more price-sensitive customers as the product becomes less novel and competition increases.

This is common in high-technology markets, where innovative products may initially have limited competition and strong demand from customers who want the latest technology.
The other options do not fit:

Penetration pricing: starts with a low price to gain market share quickly.

Premium pricing: maintains a high price to communicate superior quality or status; it does not necessarily involve later price reductions.

Loss leader pricing: sells one product at a very low price, sometimes below cost, to attract customers who may buy other products.

Maseru, Lesotho

AI Explanation - verified by User1234 on: September 28, 2026
Question 12:
Correct answer: B. Port security
A MAC flooding attack sends many fake source MAC addresses to a switch. The goal is to fill the switch’s CAM/MAC address table, causing the switch to treat unknown traffic like a hub and broadcast it out many ports. This may allow an attacker to capture traffic.
Port security mitigates this by limiting which and how many MAC addresses can appear on a switch port. It can:

Allow only approved MAC addresses

Limit the number of learned addresses

Shut down or restrict a port when a violation occurs

Why the other options are less suitable:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect some attack traffic, but it is not the direct control for limiting MAC addresses on switch ports.

NGFW: Filters routed network traffic, while this attack targets Layer 2 switch behavior.

The key clue is flooding the MAC address table, which points directly to switch port security.
Atlanta, United States

AI Explanation - verified by User6268 on: September 26, 2026
Question 6:
Correct answer: Governance
The AWS Cloud Adoption Framework (AWS CAF) organizes cloud adoption capabilities into six perspectives:

Business

People

Governance

Platform

Security

Operations

The Governance perspective includes capabilities such as managing cloud initiatives, risks, compliance, and portfolio management. It helps ensure that cloud adoption is controlled and aligned with business objectives.
The other options are AWS Well-Architected Framework pillars, not AWS CAF perspectives:

Sustainability

Performance efficiency

Reliability

So the answer key’s C is correct.
Nowon-Gu, South Korea

AI Explanation - verified by User3923 on: September 27, 2026
Question 17:
Correct answer: B — Enabling malware detection through a UTM.
The company accepts PDF uploads, which could contain malware or malicious content. A UTM (Unified Threat Management) appliance can inspect uploaded files using antivirus and malware-detection capabilities before they reach internal systems or users.
Why the others are less suitable:

A. IDS attack signatures: An IDS mainly detects suspicious network traffic. It is not the best control for scanning uploaded documents.

C. Load balancer: Distributes traffic among servers and can improve availability, but does not specifically detect malware.

D. WAF: Protects web applications from attacks such as SQL injection and command injection. It may inspect web requests, but malware scanning of PDF files is not its primary function.

The key clue is file uploads, which points to malware inspection, not primarily network intrusion or web-request filtering.
Atlanta, United States

AI Explanation - verified by User2814 on: September 19, 2026
Question 171:
Correct answers: Stream and External table
A schema is a logical container inside a database for database objects. In Snowflake, schemas can contain objects such as:

Streams — track change data for tables or views.

External tables — reference data stored in an external cloud storage location.

The other options are not schema-contained objects:

Role — account-level security object.

Warehouse — account-level compute resource.

User — account-level security object.

Share — account-level object used to share data.

So the answer key’s B and D is correct.
Bengaluru, India

AI Explanation - verified by User8545 on: September 26, 2026
Can pcs with differet / or ip range can communicate with each other?
Yes, PCs in different IP ranges can communicate, but they usually need a router or Layer 3 switch to route traffic between their networks.
Example:

PC A: 192.168.1.10/24

PC B: 192.168.2.10/24

These are different subnets. They can communicate if:

Both PCs have a correct default gateway

A router or Layer 3 switch connects the subnets

Routing and firewall rules allow the traffic

Without a router, they generally cannot communicate directly because each PC believes the other is on a different network and sends the traffic to its gateway.
The /24 is the subnet prefix length. It determines which addresses are considered local. For example, with 192.168.1.0/24, addresses from 192.168.1.1 through 192.168.1.254 are in the same subnet. A PC at 192.168.2.x is outside that subnet.
Also, PCs in the same broad IP range may still be unable to communicate if VLANs, subnet masks, ACLs, or firewalls separate them.
Quezon City, Philippines

AI Explanation - verified by User9694 on: September 13, 2026
Question 51:
Correct answer: A — Publish the reports in an app and grant the HR managers access permission.
Why:

Configure row-level security (RLS) using the sales region and the HR manager’s identity.

Publish the reports and datasets through a Power BI app.

Grant the HR managers permission to use the app, but do not add them as workspace members.

App users can view and interact with reports while RLS limits them to their region.

They cannot modify the report layout because they do not have workspace editing permissions.

Why the other options are unsuitable:

Adding them to the workspace gives them workspace permissions that may allow report or dataset changes, depending on the assigned role.

Creating copies is unnecessary and creates maintenance and security problems.

Hosting datasets and reports in different workspaces does not, by itself, provide the required controlled access.

The key distinction is: workspace access is for authors/collaborators; app access is for report consumers.
Gaborone, Botswana

AI Explanation - verified by User6479 on: September 29, 2026
Question 43:
Correct answer: D — Identifies potential bias during data preparation.
Amazon SageMaker Clarify helps organizations evaluate bias and fairness in machine learning workflows. It can analyze:

Training data for potential bias before model training

Trained models for bias in predictions

Model features to help explain how they influence predictions

Why the others are incorrect:

A: RAG workflows are typically built using services such as Amazon Bedrock, knowledge bases, and data sources.

B: Monitoring model quality in production is primarily associated with SageMaker Model Monitor.

C: Documenting model details is handled by capabilities such as SageMaker Model Cards.

The key exam distinction is: Clarify = bias detection and model explainability.
Bangkok, Thailand

AI Explanation - verified by katharina.marsal on: September 09, 2026
Question 72:
Correct answer: B — Create an active relationship and select _Apply security filter in both directions_.
Why:

An active relationship is used automatically when filters are evaluated. An inactive relationship does not propagate filters unless explicitly activated in DAX, so it would not reliably enforce the required security behavior.

Apply security filter in both directions allows RLS filters to propagate across the relationship in both directions. This ensures that bidirectional filtering respects the RLS rules applied to both tables.

Assume referential integrity is unrelated to RLS. It is mainly a DirectQuery optimization that allows Power BI to use an inner join when matching keys are guaranteed to exist.

The relationship must therefore be active, with security filtering enabled in both directions.

Bern, Switzerland

AI Explanation - verified by User4530 on: September 30, 2026
Question 10:
Correct answer: Yes (A).
For a SQL Server Always On availability group listener hosted on Azure VMs, the Azure internal load balancer must use Floating IP—also called Direct Server Return (DSR).
Why:

The load balancer provides the listener’s frontend IP address.

The active SQL Server node must also respond to that same listener IP.

Enabling Floating IP allows the listener IP to be preserved and handled correctly by the active replica.

Without it, SQL connections may be sent to a node that cannot correctly claim the listener address.

The load balancer configuration normally also requires:

A health probe for the SQL Server port

A load-balancing rule using the listener port

Floating IP enabled on that rule

Therefore, the proposed solution—enable Floating IP—meets the goal.
Richmond, United Kingdom

AI Explanation - verified by User3731 on: September 14, 2026
Question 13:
Correct answer: C. Jailbreaking
Jailbreaking modifies or bypasses a smartphone’s built-in restrictions, allowing the user to:

Install unauthorized or unsupported software

Access features blocked by the manufacturer or operating system

Customize system behavior beyond normal settings

Sideloading means installing an application from a source other than the official app store. It may install unauthorized software, but it does not necessarily modify the operating system or enable new system-level features.
So yes—the wording about enabling new features points toward jailbreaking. The question describes more than simply installing an outside app; it describes bypassing platform restrictions.
Porter Ranch, United States

AI Explanation - verified by stefan_dragomirescu on: September 09, 2026
Question 152:
The stated answer for DB1 looks incorrect.

DB1 (500 TB): Azure Data Box Heavy

- The database is too large for a practical network transfer. - Data Box Heavy supports offline transfer of very large data volumes—up to approximately 1 PB. - You can copy database backup files to the device, ship it to Azure, and then restore or continue the migration there. - This avoids transmitting the data over the internet and minimizes internet impact. - The explanation’s references to 500 GB and Data Migration Assistant do not match the question’s 500 TB requirement. DMA is intended for assessment/schema/data migration scenarios, not efficient offline transfer of a 500-TB database.

Virtual machines: Azure Migrate

- Azure Migrate replicates on-premises VMs to Azure. - It supports a test migration without affecting production. - During the final migration, the brief cutover minimizes downtime.
Therefore, the likely correct selections are:
| Workload | Service | |---|---| | DB1 | Azure Data Box Heavy | | Virtual machines | Azure Migrate |
Bucharest, Romania

AI Explanation - verified by User3350 on: September 20, 2026
Question 18:
Correct answer: C — try to expand its customer base to avoid becoming dependent on the corporation.
The passage warns that a minority-owned business may become dependent on one large corporate customer. If that customer reduces its orders or ends the relationship, the small business could suffer serious financial problems. The business might also become complacent and stop seeking other opportunities.
Therefore, it should develop relationships with additional customers, even though it may have to compete with larger, established companies.
Why the other choices are wrong:

A: Not expanding would increase its dependence.

B: More business from the same corporation would make dependence worse.

D: Passing work to other minority businesses does not solve its own dependence.

E: The passage does not suggest that it can force or influence the corporation to give work to others.

Lagos, Nigeria

What the CBDE Exam Tests and How to Pass It

The BTA Certified Blockchain Developer - Ethereum (CBDE) certification is designed for professionals who aim to demonstrate their technical proficiency in building decentralized applications on the Ethereum blockchain. This certification validates that a candidate possesses the necessary skills to design, develop, and deploy smart contracts, interact with the Ethereum network, and understand the underlying architecture of blockchain technology. Organizations hiring for roles such as blockchain developer, smart contract engineer, or decentralized application (dApp) architect often look for this credential to ensure candidates have a standardized baseline of knowledge. By earning this Blockchain certification, developers prove they can navigate the complexities of Solidity, Ethereum Virtual Machine (EVM) operations, and the broader ecosystem of Ethereum development tools. It serves as a professional benchmark for those who need to show they can move beyond theoretical understanding and apply technical concepts to real-world development scenarios.

What the CBDE Exam Covers

The CBDE exam evaluates a candidate's ability to handle the full lifecycle of Ethereum development, ranging from the fundamental concepts of blockchain to the intricate details of smart contract programming. Candidates must demonstrate a solid grasp of how Ethereum differs from other blockchain platforms, including its consensus mechanisms and transaction processing models. The exam covers the practical application of Solidity, requiring developers to understand how to write secure, efficient, and gas-optimized code for decentralized applications. Furthermore, the exam tests knowledge of development frameworks and tools that facilitate the deployment and testing of smart contracts, ensuring that developers can manage the entire development pipeline. Using our practice questions allows you to test your knowledge across these domains, helping you identify which areas require further study before you sit for the actual certification exam.

The most technically demanding aspect of the CBDE exam often involves the nuances of smart contract security and the intricacies of the Ethereum Virtual Machine. Candidates are frequently tested on their ability to identify vulnerabilities in code, such as reentrancy attacks or integer overflows, which requires a deep understanding of how the EVM executes bytecode. This section of the exam preparation process is critical because it moves beyond syntax and into the logic of secure development, which is a non-negotiable skill for any professional blockchain developer. Mastering these concepts requires not just reading documentation, but actively working through complex scenarios where code must be audited and optimized for both security and cost-efficiency.

Are These Real CBDE Exam Questions?

Our platform provides practice questions that are sourced and verified by the community, consisting of IT professionals and recent test-takers who have sat for the actual exam. Because these individuals have firsthand experience with the testing environment, our questions reflect what appears on the real exam, ensuring that your study time is spent on relevant material. We prioritize a community-verified approach, which means that the content is constantly reviewed and updated by those who are currently active in the field. If you've been searching for CBDE exam dumps or braindump files, our community-verified practice questions offer something more valuable, each question is verified and explained by IT professionals who recently passed the exam. This method ensures that you are engaging with high-quality, accurate material rather than outdated or potentially misleading information found in unauthorized files.

The community verification process is the backbone of our platform's reliability, as it transforms static questions into a dynamic learning resource. When a user encounters a difficult question, they can participate in discussions where peers debate the correct answer, share their reasoning, and provide context from their own recent exam experience. This collaborative environment allows users to flag incorrect answers or suggest improvements, ensuring that the question bank remains accurate and reflective of the current exam standards. By engaging with these discussions, you gain insights into the logic behind the questions, which is far more effective for long-term retention than simply memorizing answers.

How to Prepare for the CBDE Exam

Effective exam preparation for the CBDE requires a blend of theoretical study and hands-on coding practice in a sandbox or local development environment. You should focus on building your own smart contracts using tools like Remix, Hardhat, or Truffle, as this practical experience is essential for understanding how Ethereum development works in practice. Rather than relying on rote memorization, aim to understand the underlying concepts of how transactions are mined, how gas is calculated, and how decentralized applications interact with the blockchain. Every practice question includes a free AI Tutor explanation that breaks down the reasoning behind the correct answer, so you understand the concept, not just the answer. This AI Tutor serves as a constant companion during your exam prep, helping you clarify complex topics whenever you encounter a challenging question.

A common mistake candidates make is underestimating the importance of scenario-based questions, which require the application of knowledge rather than simple recall. To avoid this, ensure your study schedule includes time for analyzing code snippets and troubleshooting common development errors, as these are frequently tested on the certification exam. Many candidates also fail to manage their time effectively during the actual test, so practicing with timed sessions is a vital part of your exam preparation strategy. By consistently simulating the pressure of the exam environment, you will be better prepared to handle the technical challenges of the CBDE without feeling rushed or overwhelmed.

What to Expect on Exam Day

On the day of your exam, you should be prepared for a format that typically includes a mix of multiple-choice and scenario-based questions designed to test your technical proficiency. These questions are structured to evaluate your ability to make decisions in a development context, such as choosing the right tool for a specific task or identifying the most secure coding practice for a given situation. The exam is administered under strict conditions to ensure the integrity of the certification, and you should be familiar with the testing platform's requirements before you begin. While the specific number of questions and time limits can vary, the core of the experience remains a rigorous assessment of your skills as an Ethereum developer. Approaching the exam with a clear understanding of the format and a solid foundation of knowledge will help you perform at your best.

Who Should Use These CBDE Practice Questions

These practice questions are intended for developers, software engineers, and technical architects who are looking to validate their skills with the BTA Certified Blockchain Developer - Ethereum credential. Typically, candidates for this certification have some experience with programming and are looking to transition into or specialize in the blockchain space, making this an ideal milestone for career advancement. Whether you are a seasoned developer or someone newer to the Ethereum ecosystem, this certification exam provides a recognized standard that can help you stand out in the competitive job market. Using our platform as part of your exam preparation will help you build the confidence needed to succeed, regardless of your current experience level.

To get the most out of these practice questions, do not simply read the answer and move on; instead, engage deeply with the AI Tutor explanation to ensure you grasp the underlying logic. Read through the community discussions to see how other professionals approach the same problems, as this can provide alternative perspectives that are invaluable during the actual exam. If you find yourself consistently getting certain topics wrong, flag those questions and revisit them later to ensure you have truly mastered the material. Browse the questions above and use the community discussions and AI Tutor to build real exam confidence.

AI Tutor 👋 I’m here to help!

Blockchain CBDE Exam Prep BTA Certified Blockchain Developer - Ethereum (Page 2 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

What the CBDE Exam Tests and How to Pass It

What the CBDE Exam Covers

Are These Real CBDE Exam Questions?

How to Prepare for the CBDE Exam

What to Expect on Exam Day

Who Should Use These CBDE Practice Questions

Blockchain CBDE Exam Prep
BTA Certified Blockchain Developer - Ethereum (Page 2 )