I85PREP
⌘ K
BCCILA study materials
BCCILA study resources

BCCILA practice questions

One question at a time. Build your BCCILA understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Blockchain and Distributed Ledger Fundamentals

In a blockchain, what property does a cryptographic hash function primarily provide for each block's contents?

  1. Tamper-evident fingerprinting of the data Correct answer.
  2. Encryption of transactions so only miners can read them
  3. Randomized ordering of transactions within a block
  4. Compression of the ledger to save disk space

Explanation

A hash function maps any input to a fixed-length digest, and even a one-bit change produces a completely different output. This lets any participant detect modification of block contents by recomputing the digest. Hashing does not encrypt data or compress it.

Question 2Blockchain and Distributed Ledger Fundamentals

What is the defining characteristic of a permissionless (public) blockchain?

  1. Any party can join, read the ledger, and attempt to participate in consensus Correct answer.
  2. All transactions are hidden from non-participants by default
  3. A central bank settles every transaction off-chain
  4. Only pre-approved institutions may validate blocks

Explanation

Permissionless chains impose no gatekeeper on participation: anyone can run a node, read state, and compete to produce blocks. Access control and identity vetting are hallmarks of permissioned networks instead. Confidentiality is a separate design choice, not a requirement of openness.

Question 3Blockchain and Distributed Ledger Fundamentals

Why does a blockchain link each block to its predecessor by including the previous block's hash?

  1. To allow nodes to delete old blocks safely
  2. To speed up signature verification
  3. To make retroactive alteration of history detectable and costly Correct answer.
  4. To reduce the total size of the chain

Explanation

Because each block commits to the hash of the block before it, changing any earlier block invalidates all subsequent hashes. An attacker would have to redo that work and outpace the honest network. The linkage is about integrity, not size or speed.

Question 4Blockchain and Distributed Ledger Fundamentals

Which statement best describes a distributed ledger that is not a blockchain?

  1. It must always use proof of work for ordering
  2. It cannot achieve agreement among nodes without blocks
  3. It stores every record on a single central server
  4. It may maintain shared state without chaining records into hash-linked blocks Correct answer.

Explanation

Distributed ledgers are the broader category; blockchains are one design that batches records into hash-linked blocks. Ledgers such as DAG-based or gossip-based systems share state without a linear block chain. Consensus method and topology vary independently of the block structure.

Question 5Blockchain and Distributed Ledger Fundamentals

In a Merkle tree inside a block, what does the root hash commit to?

  1. The complete set of transactions in that block Correct answer.
  2. The current account balance of every node
  3. Only the first transaction in the block
  4. The identity of the miner who built the block

Explanation

Leaf nodes hash individual transactions and are paired upward until a single root remains. Changing any transaction changes the root, so the root commits to the whole set. This enables compact inclusion proofs without revealing the entire block.

Question 6Blockchain and Distributed Ledger Fundamentals

What does a digital signature over a transaction primarily prove to validating nodes?

  1. The recipient's identity has been verified by a government
  2. The transaction fee is the lowest available
  3. The signer authorized this exact transaction and holds the corresponding private key Correct answer.
  4. The transaction will be included in the next block

Explanation

A signature is verified against the signer's public key and binds the signer to the exact message signed. It proves key possession and intent for that transaction. It says nothing about fees, inclusion timing, or legal identity.

Question 7Blockchain and Distributed Ledger Fundamentals

What is the primary purpose of a consensus mechanism in a distributed ledger?

  1. To compress historical blocks for archival storage
  2. To assign legal liability for failed transactions
  3. To let independent nodes agree on a single ordering of state changes Correct answer.
  4. To encrypt peer-to-peer network traffic

Explanation

Nodes may receive transactions in different orders, so the protocol must converge on one canonical history. Consensus mechanisms provide that agreement despite faulty or malicious participants. Encryption, legal liability, and archival compression are separate concerns.

Question 8Blockchain and Distributed Ledger Fundamentals

What distinguishes a coin from a token in typical distributed-ledger terminology?

  1. A coin must be backed one-to-one by physical gold
  2. A token cannot be transferred between accounts
  3. A coin is the native asset of its own ledger, while a token is issued on top of an existing ledger Correct answer.
  4. A coin is always worth more than a token

Explanation

Native coins are the built-in unit that a protocol uses to pay fees and reward validators. Tokens are created by contracts or scripts running on an existing ledger. Value and backing are economic attributes that do not define the distinction.

Question 9Blockchain and Distributed Ledger Fundamentals

A transaction is broadcast to a network using a gossip protocol. Which behavior is expected?

  1. Nodes must delete the transaction after one forward
  2. Only the original sender ever sees the transaction
  3. The transaction is sent directly to a single central clearinghouse
  4. Each receiving node forwards the transaction to a subset of its peers Correct answer.

Explanation

Gossip (flooding) propagation has each node relay new data to peers that have not yet seen it, so information spreads quickly and redundantly. This makes the network resilient to node failures. There is no central clearinghouse in a peer-to-peer ledger.

Question 10Blockchain and Distributed Ledger Fundamentals

A user wants to prove that one specific transaction is included in a block without downloading every transaction. Which structure enables this most efficiently?

  1. A full copy of the entire blockchain
  2. A zero-knowledge proof of the sender's balance
  3. A timestamp signed by the block producer
  4. A Merkle inclusion proof against the block's root Correct answer.

Explanation

A Merkle proof supplies the sibling hashes along the path from the leaf to the root, letting a verifier recompute the root from a single transaction. This is logarithmic in the number of transactions. Downloading the full chain works but is far less efficient.

Question 11Blockchain and Distributed Ledger Fundamentals

On a proof-of-work chain, an attacker controls slightly more than half of total hash rate. What is the main risk this creates?

  1. Automatic reversal of every historical transaction back to genesis
  2. Permanent inability of honest nodes to verify signatures
  3. Immediate theft of all private keys on the network
  4. Reorganization of recent blocks to double-spend, while still competing to extend the heaviest chain Correct answer.

Explanation

A majority of hash rate lets an attacker mine a private chain faster than the public one and publish it to orphan recent honest blocks, enabling double-spends. It does not reveal private keys or rewrite deeply buried history cheaply. Signature verification remains intact.

Question 12Blockchain and Distributed Ledger Fundamentals

In proof-of-stake, why is a validator required to lock a stake that can be slashed?

  1. To encrypt the validator's peer-to-peer connections
  2. To impose an economic penalty for provably malicious behavior such as equivocation Correct answer.
  3. To increase the block size limit
  4. To guarantee the validator always earns a profit

Explanation

Proof-of-stake replaces physical work with economic commitment. If a validator signs conflicting blocks, the protocol can destroy part of its bonded stake, making attacks costly. The stake is collateral, not a profit guarantee or a networking feature.

Question 13Blockchain and Distributed Ledger Fundamentals

What is the role of a nonce in a proof-of-work block header?

  1. It identifies the node that first relayed the block
  2. It is varied by miners so the header hash meets the target Correct answer.
  3. It records the transaction fee total
  4. It stores the recipient's public key

Explanation

Miners repeatedly change the nonce (and other header fields) and rehash until the result falls below the difficulty target. Finding such a value requires trial and error, which is the costly work. The nonce carries no key, fee, or relay information.

Question 14Blockchain and Distributed Ledger Fundamentals

A validator in a Byzantine fault-tolerant protocol observes that two peers report conflicting values for the same round. Which property must the protocol still guarantee to be useful?

  1. Throughput above a fixed threshold
  2. Agreement, so honest nodes finalize the same value despite the conflicting reports Correct answer.
  3. Confidentiality of the conflicting messages
  4. Liveness only, allowing any value to be finalized

Explanation

Byzantine fault tolerance requires safety (agreement) and liveness even when some nodes behave arbitrarily. Conflicting reports are exactly the fault the protocol must tolerate without honest nodes diverging. Confidentiality and throughput are desirable but not the defining guarantee.

Question 15Blockchain and Distributed Ledger Fundamentals

Why does a public blockchain typically define a transaction fee market?

  1. To identify users to regulators
  2. To allocate scarce block space among competing transactions Correct answer.
  3. To prevent nodes from joining the network
  4. To encrypt transaction payloads

Explanation

Block space is limited, so a price mechanism lets senders bid for inclusion and compensates validators for resources. Higher fees generally improve priority during congestion. Fees do not encrypt data or perform identity checks.

Question 16Blockchain and Distributed Ledger Fundamentals

A developer wants to timestamp a document so that its existence at a point in time is provable without revealing its contents. Which approach fits best?

  1. Publish the full document in a transaction
  2. Encrypt the document with the recipient's public key and publish it
  3. Publish a hash of the document in a transaction and retain the original privately Correct answer.
  4. Store the document only on the developer's local disk

Explanation

Committing to a hash anchors the document to a block time while keeping the content private, since the hash reveals nothing practical about the text. Anyone holding the document can later verify the hash matches. Publishing plaintext destroys confidentiality.

Question 17Blockchain and Distributed Ledger Fundamentals

How does a public-key signature scheme support pseudonymous accounts on a ledger?

  1. Accounts are identified by verified legal names stored on-chain
  2. Accounts are identified by IP address
  3. Accounts are identified by public keys or their hashes, and control is proven by signatures Correct answer.
  4. Accounts require a notarized paper certificate

Explanation

A ledger account is typically an address derived from a public key, and spending requires a valid signature from the matching private key. No real-world identity is inherently bound to the address. This yields pseudonymity rather than anonymity or verified identity.

Question 18Blockchain and Distributed Ledger Fundamentals

A consortium of banks runs a ledger where only vetted members may validate blocks, but any member may read all transactions. How should this network be classified?

  1. Permissioned and private in write access but shared in read access Correct answer.
  2. Permissionless but encrypted
  3. A centralized database with no distributed consensus
  4. Permissionless and public

Explanation

Validation is restricted to approved members, which makes write access permissioned. Read access is open to members, so the ledger is shared among them rather than public to everyone. Permissionless networks allow anyone to validate.

Question 19Blockchain and Distributed Ledger Fundamentals

What does finality mean for a transaction recorded on a distributed ledger?

  1. The transaction has been broadcast to at least one peer
  2. The transaction has been signed by the sender
  3. The transaction is considered irreversible under the protocol's rules Correct answer.
  4. The transaction fee has been refunded

Explanation

Finality is the point at which a transaction can no longer be reversed or reordered by the protocol. Probabilistic finality deepens with each confirming block, while some protocols offer deterministic finality after a vote. Signing and broadcasting occur long before finality.

Question 20Blockchain and Distributed Ledger Fundamentals

A light client wants to check an account balance without storing full ledger state. Which technique is appropriate?

  1. Asking a single peer and accepting the answer without proof
  2. Verifying a cryptographic proof of the account against a trusted state root Correct answer.
  3. Recomputing all signatures in the ledger's history
  4. Downloading and validating every block since genesis

Explanation

State commitments such as Merkle or Verkle roots allow a client to verify a small proof that a value exists in state at a given root. The client still needs assurance that the root itself is canonical. Trusting an unproven peer response defeats the purpose.

Question 21Blockchain and Distributed Ledger Fundamentals

Why can naive proof-of-work consensus become vulnerable when two competing chains have equal accumulated work?

  1. Hash functions stop producing valid outputs
  2. Signatures become forgeable during the tie
  3. The network immediately loses all transaction data
  4. Nodes may temporarily disagree on the canonical tip, and the tie must be broken by a deterministic rule such as first-seen Correct answer.

Explanation

When accumulated work is equal, the protocol needs a tie-break rule so nodes converge, commonly accepting the first valid block seen. Short-lived forks are normal and resolve as one chain gains more work. Data, hashing, and signatures remain sound throughout.

Question 22Blockchain and Distributed Ledger Fundamentals

An attacker withholds a newly mined block and later releases a longer private chain that excludes a previously confirmed payment. What is this attack called?

  1. Replay attack on signed messages
  2. Sybil attack
  3. Selfish-mining-style reorg enabling double-spend Correct answer.
  4. Dusting attack

Explanation

By secretly extending a competing chain and publishing it once longer, the attacker orphans honest blocks containing the payment and replaces them with a chain that omits it. This is a reorg-based double-spend, often associated with selfish mining strategies. A Sybil attack instead creates many fake identities.

Question 23Blockchain and Distributed Ledger Fundamentals

In a practical Byzantine fault-tolerant protocol with 3f+1 validators, why is this specific quorum size required?

  1. It allows the network to function with no message delivery guarantees
  2. It removes the need for digital signatures
  3. It ensures every validator earns equal rewards
  4. It guarantees that any two quorums of size 2f+1 overlap in at least one honest node Correct answer.

Explanation

With at most f faulty validators, quorums of 2f+1 intersect in at least f+1 nodes, of which at least one is honest. That intersection prevents conflicting values from being certified in the same round. Reward equality and signature removal are unrelated to the bound.

Question 24Blockchain and Distributed Ledger Fundamentals

A protocol claims deterministic finality after a single round of validator votes. Which assumption is most critical for that claim to hold safely?

  1. That transaction fees stay constant
  2. That fewer than one third of voting power is Byzantine Correct answer.
  3. That block times remain under one second
  4. That all validators run the same hardware

Explanation

Safety of a one-round finality vote depends on the fault bound: if Byzantine voting power stays below the threshold, conflicting certificates cannot both form. Hardware uniformity and block timing affect performance, not the safety proof. Fee levels are irrelevant to consensus safety.

Question 25Blockchain and Distributed Ledger Fundamentals

A zero-knowledge proof is used to validate a batch of transactions on a rollup. What is the main benefit this provides to the base layer?

  1. It lets the base layer verify correctness of the batch with far less computation than re-executing it Correct answer.
  2. It removes the need for any data availability guarantees
  3. It makes the rollup's transactions confidential by default
  4. It eliminates the need for users to hold private keys

Explanation

A succinct proof attests that the batch's state transition is valid, so the verifier checks a small proof instead of re-executing every transaction. Data availability is still required so others can reconstruct state. Confidentiality and key management are separate concerns.

Question 26Blockchain and Distributed Ledger Fundamentals

In a distributed ledger, what is the primary function of a Merkle tree within a block header?

  1. It stores the full account state so that nodes can execute smart contracts locally.
  2. It orders transactions by fee so that validators process the highest-paying ones first.
  3. It encrypts transaction payloads so that only the block producer can read them.
  4. It allows efficient verification that a transaction belongs to the block without downloading every transaction. Correct answer.

Explanation

A Merkle tree hashes transactions pairwise up to a single root stored in the block header. A verifier only needs the header plus a short Merkle path (logarithmic in the number of transactions) to confirm inclusion, which is why light clients can check transactions efficiently. The tree does not provide confidentiality, fee ordering, or full state storage.

Question 27Blockchain and Distributed Ledger Fundamentals

A developer is choosing between a public permissionless ledger and a private permissioned ledger for a supply-chain consortium. Which characteristic most directly distinguishes the permissioned option?

  1. Consensus is achieved without any messages exchanged between nodes.
  2. Only approved identities can participate in validating transactions and reading the ledger. Correct answer.
  3. Transactions are recorded without any cryptographic linking between blocks.
  4. Tokens issued on the ledger cannot be transferred between participants.

Explanation

Permissioned ledgers restrict who may join, validate, and often who may read, typically through identity vetting by a consortium. Public permissionless ledgers allow anyone to validate and read. The other options describe properties that are not inherent to permissioning.

Question 28Blockchain and Distributed Ledger Fundamentals

A node receives a block whose header hash meets the network's proof-of-work target. Before accepting the block, what additional check is most important for preventing a denial-of-service attack through wasted computation?

  1. Verify that the block contains at least one transaction paying the node a fee.
  2. Verify that the block's timestamp is later than the node's local clock.
  3. Verify that the block producer's identity is on an approved validator list.
  4. Verify that the block's parent is already known and valid, so the block extends the canonical chain. Correct answer.

Explanation

A valid proof-of-work alone does not make a block useful; it must connect to a known valid parent to extend the chain. Checking parent availability and validity early lets a node reject orphaned or maliciously crafted blocks before doing expensive validation work. The other checks are either incorrect or not relevant to DoS resistance in a permissionless proof-of-work chain.

Question 29Blockchain and Distributed Ledger Fundamentals

A consortium ledger uses a Practical Byzantine Fault Tolerance protocol with 3f+1 validators. If f=1, how many validators must agree for the protocol to tolerate one faulty validator, and why?

  1. Three validators, because the quorum must exceed two-thirds of the total set. Correct answer.
  2. Two validators, because a simple majority is always sufficient for safety.
  3. One validator, because the leader alone decides the outcome.
  4. Four validators, because every validator must participate in each round.

Explanation

With 3f+1 total validators, a quorum of 2f+1 is required so that any two quorums intersect in at least one honest validator. For f=1, the total is four and the quorum is three, which exceeds two-thirds of four. This intersection property prevents conflicting decisions when up to f validators are faulty.

Question 30Blockchain and Distributed Ledger Fundamentals

A public ledger has no native token and charges no fees. An attacker floods the network with validly signed transactions that each perform a small amount of computation. Which property of the ledger design most directly enables this attack to persist?

  1. Accounts are identified by public keys rather than legal names.
  2. Transactions are broadcast using a gossip protocol.
  3. Blocks are linked by cryptographic hashes.
  4. There is no economic cost or rate limit tied to transaction inclusion. Correct answer.

Explanation

Without fees or another inclusion cost, an attacker can submit unlimited valid transactions at near-zero marginal cost, consuming validator resources indefinitely. Fee markets or rate limits impose a cost that makes sustained spam expensive. Gossip, hash linking, and pseudonymous accounts are standard ledger features that do not by themselves create this vulnerability.

Question 31Legal and Regulatory Frameworks for Blockchain

Under the EU's Markets in Crypto-Assets Regulation (MiCA), which activity requires authorisation as a crypto-asset service provider when performed for third parties on a professional basis?

  1. Publishing a white paper on a utility token for information only
  2. Operating a trading platform for crypto-assets Correct answer.
  3. Mining crypto-assets on proprietary hardware
  4. Holding crypto-assets solely for personal investment

Explanation

MiCA lists operating a trading platform as one of the regulated crypto-asset services, so providing it to third parties professionally requires CASP authorisation from a national competent authority. Personal holding and pure mining are outside the service list, and mere publication of a white paper is not itself a regulated service.

Question 32Legal and Regulatory Frameworks for Blockchain

A token issuer wants to rely on the MiCA white paper regime for a crypto-asset that is not an asset-referenced or e-money token. What is the core notification step before public offer?

  1. Obtain a banking licence from the ECB
  2. Complete a full prospectus approval under the Prospectus Regulation
  3. Notify the national competent authority and publish a compliant white paper Correct answer.
  4. Register the token as a transferable security with ESMA

Explanation

For crypto-assets other than ART and EMT, MiCA requires the offeror to notify the competent authority and publish a white paper meeting the prescribed content and form. A banking licence, ESMA security registration, or full prospectus approval are different regimes that do not apply to this category.

Question 33Legal and Regulatory Frameworks for Blockchain

Which body is responsible for supervising the largest asset-referenced token issuers directly under MiCA's supervisory architecture?

  1. The national central bank of the issuer's home state
  2. The European Securities and Markets Authority
  3. The European Banking Authority Correct answer.
  4. The European Central Bank

Explanation

MiCA assigns direct supervision of significant asset-referenced token issuers to EBA, working with the relevant national authorities. ESMA handles significant non-ART/EMT issuers and CASPs, while the ECB and national central banks have roles in payment oversight rather than direct ART issuer supervision.

Question 34Legal and Regulatory Frameworks for Blockchain

Under the FATF Recommendation 15 framework, what does the 'travel rule' require of virtual asset service providers?

  1. Verify the mining hash rate of the counterparty's node
  2. File a suspicious activity report for every transfer above a fixed global threshold
  3. Escrow all customer virtual assets with a qualified custodian
  4. Obtain and transmit originator and beneficiary information with virtual asset transfers Correct answer.

Explanation

The travel rule requires VASPs to collect and transmit identifying information about the originator and beneficiary alongside qualifying virtual asset transfers. Thresholds and reporting duties vary by jurisdiction, and the rule does not impose hash-rate verification or mandatory escrow.

Question 35Legal and Regulatory Frameworks for Blockchain

A jurisdiction applies the FATF 'same person' interpretation of the travel rule. How should a VASP treat a transfer between two wallets it controls for the same customer?

  1. It must block the transfer until a third VASP confirms the data
  2. It must convert the transfer into a fiat payment to trigger bank rules
  3. It must transmit full originator data to itself as if an external VASP
  4. It may treat the transfer as not requiring counterparty information transmission Correct answer.

Explanation

Under the same-person interpretation, a transfer where the originator and beneficiary are the same person and the VASP controls both ends can be treated as outside the cross-institution information transmission requirement. The provider still retains records and performs its normal AML monitoring.

Question 36Legal and Regulatory Frameworks for Blockchain

Which characteristic best distinguishes a security token from a utility token in most regulatory classifications?

  1. It represents an investment with an expectation of profit from a common enterprise Correct answer.
  2. It grants access to a product or service on a platform
  3. It is always pegged to a fiat currency
  4. It is issued only through a proof-of-work consensus

Explanation

Security classification typically turns on investment characteristics such as an expectation of profit derived from the efforts of others, following tests like Howey in the US. Utility tokens grant access to goods or services, stablecoins are pegged, and consensus mechanism is irrelevant to classification.

Question 37Legal and Regulatory Frameworks for Blockchain

A US issuer conducts a token sale to the general public without registration and without an available exemption. Which statutory provision is most directly implicated?

  1. Section 4 of the Commodity Exchange Act
  2. Regulation BI of the Investment Advisers Act
  3. Section 13 of the Securities Exchange Act of 1934
  4. Section 5 of the Securities Act of 1933 Correct answer.

Explanation

Section 5 prohibits offers and sales of securities without an effective registration statement or an applicable exemption. Exchange Act Section 13 concerns periodic reporting, Regulation BI governs broker-dealer recommendations, and the Commodity Exchange Act addresses derivatives and commodities.

Question 38Legal and Regulatory Frameworks for Blockchain

In the US, which test is most commonly applied to determine whether a digital asset is an 'investment contract' and therefore a security?

  1. The Altmark test
  2. The Alice test
  3. The Bilski test
  4. The Howey test Correct answer.

Explanation

The Howey test asks whether there is an investment of money in a common enterprise with an expectation of profit derived from the efforts of others. Bilski and Alice concern patent eligibility, and Altmark concerns state aid compensation in EU law.

Question 39Legal and Regulatory Frameworks for Blockchain

Which statement best describes the legal status of bitcoin under MiCA?

  1. It is a crypto-asset outside the ART and EMT categories and is not subject to the white paper offer rules Correct answer.
  2. It is an e-money token because it is used for payments
  3. It is a financial instrument under MiFID II
  4. It is an asset-referenced token because its value is referenced to market demand

Explanation

Bitcoin does not reference another asset or official currency, so it is neither an ART nor an EMT, and the general offer white paper rules are not designed for fully decentralised assets without an identifiable issuer. It is not a MiFID financial instrument.

Question 40Legal and Regulatory Frameworks for Blockchain

What is the primary purpose of a crypto-asset white paper under MiCA?

  1. To provide mandatory disclosure enabling informed assessment of the crypto-asset Correct answer.
  2. To obtain tax clearance from the issuer's jurisdiction
  3. To guarantee the token's price stability
  4. To certify the issuer's cybersecurity controls

Explanation

The white paper is a disclosure document with prescribed content, including risks and the issuer's project, so that buyers can make an informed decision. It is not a price guarantee, a security certification, or a tax instrument.

Question 41Legal and Regulatory Frameworks for Blockchain

Under MiCA, what distinguishes an asset-referenced token from an e-money token?

  1. An ART references any value or right to maintain stability, while an EMT references only an official currency Correct answer.
  2. An ART is exempt from white paper requirements, while an EMT is not
  3. An ART is always issued by a bank, while an EMT is issued by any firm
  4. An EMT may reference a basket of commodities, while an ART may reference only gold

Explanation

The key distinction is the reference: an EMT stabilises its value by reference to a single official currency, whereas an ART may reference other values, rights, or combinations. Issuer type and commodity baskets do not define the categories, and both have disclosure obligations.

Question 42Legal and Regulatory Frameworks for Blockchain

A crypto exchange wants to operate in the EU under MiCA. Which authorisation route applies?

  1. Obtain a separate licence from every member state before any activity
  2. Register only with ESMA, which then authorises all EU activity
  3. Rely on an existing e-money licence without further approval for trading services
  4. Obtain CASP authorisation in one member state and then use the passport to serve others Correct answer.

Explanation

MiCA uses a single authorisation granted by the home member state competent authority, which can then be passported across the EU for the authorised services. Separate per-state licences are not required, ESMA does not grant the CASP authorisation, and an e-money licence covers only limited services.

Question 43Legal and Regulatory Frameworks for Blockchain

Which entity type typically falls outside the definition of a virtual asset service provider under the FATF framework?

  1. A transfer service that moves virtual assets between addresses for customers
  2. A software developer that only publishes open-source wallet code and never holds customer assets Correct answer.
  3. A custodian that holds virtual assets on behalf of customers
  4. A cryptocurrency exchange that converts virtual assets to fiat

Explanation

FATF guidance focuses on entities conducting activities such as exchange, transfer, safekeeping, and administration, not on developers who merely publish code without controlling customer assets. Exchanges, custodians, and transfer services are core VASP activities.

Question 44Legal and Regulatory Frameworks for Blockchain

What does a 'sunset clause' in a blockchain regulatory framework typically do?

  1. It exempts all smart contracts from contract law
  2. It sets a date after which the regime expires unless extended by the legislature Correct answer.
  3. It grants a retroactive amnesty for past non-compliance
  4. It permanently prohibits all new token issuances

Explanation

A sunset clause builds in automatic expiry or review of a law or provision after a specified period, forcing the legislature to reassess and renew it. It does not grant amnesty, ban issuances, or alter general contract law.

Question 45Legal and Regulatory Frameworks for Blockchain

Which legal concept most directly supports enforcing a smart contract's outcome as a binding agreement between parties?

  1. The presumption that code overrides all statutory law
  2. The doctrine that decentralised networks cannot form legal relations
  3. The rule that only notarised documents create obligations
  4. Freedom of contract and the enforceability of agreed terms Correct answer.

Explanation

Smart contracts are generally analysed as agreements whose terms are expressed in code, so enforceability rests on ordinary contract principles such as mutual assent and lawful terms. Code does not override statute, decentralisation does not prevent legal relations, and notarisation is not a universal requirement.

Question 46Legal and Regulatory Frameworks for Blockchain

What is the main legal rationale for anti-money laundering registration regimes aimed at crypto businesses?

  1. To guarantee the profitability of registered exchanges
  2. To set the price of virtual assets
  3. To replace criminal law with administrative penalties
  4. To extend customer due diligence and reporting obligations to entities that can move value outside banks Correct answer.

Explanation

AML registration regimes bring crypto intermediaries within the regulated perimeter so that customer due diligence, recordkeeping, and suspicious transaction reporting apply. They are not designed to guarantee profits, set prices, or displace criminal liability.

Question 47Legal and Regulatory Frameworks for Blockchain

A bank in a jurisdiction that permits crypto custody wants to offer custody of virtual assets to clients. Which legal consideration is most directly relevant?

  1. Whether the bank can disregard the travel rule for its clients
  2. Whether the bank may issue its own currency to fund the custody
  3. Whether the bank can avoid all recordkeeping for the assets
  4. Whether the bank's authorisation and prudential rules permit holding such assets and the associated risks Correct answer.

Explanation

Banks must confirm that their licence and prudential framework allow crypto custody and that they can manage custody, operational, and AML risks. Recordkeeping and travel rule duties are not waived, and issuing currency is unrelated.

Question 48Legal and Regulatory Frameworks for Blockchain

Which regulatory approach is most associated with the EU's treatment of decentralised finance under MiCA?

  1. Fully decentralised services without an identifiable intermediary are largely outside MiCA, with review and reporting obligations on regulators Correct answer.
  2. All DeFi protocols are automatically licensed as CASPs
  3. DeFi is regulated exclusively by the ECB
  4. DeFi is banned across the EU

Explanation

MiCA focuses on identifiable issuers and service providers, and the Commission was tasked with assessing and reporting on DeFi, so fully decentralised arrangements without an intermediary largely fall outside the current perimeter. Automatic licensing, a ban, and exclusive ECB control do not reflect the framework.

Question 49Legal and Regulatory Frameworks for Blockchain

What is the function of a regulatory sandbox in blockchain finance?

  1. To transfer supervisory authority to the firms themselves
  2. To provide government funding for token prices
  3. To exempt firms permanently from all consumer protection law
  4. To allow firms to test innovative products under supervisory oversight with temporary relief or tailored rules Correct answer.

Explanation

Sandboxes let supervised firms experiment within defined parameters, often with modified or waived requirements, while regulators observe risks. They are time-limited and conditional, not permanent exemptions, funding schemes, or delegations of authority.

Question 50Legal and Regulatory Frameworks for Blockchain

Which obligation is central to the FATF's risk-based approach for virtual asset service providers?

  1. Refusing all customers from higher-risk jurisdictions without assessment
  2. Applying identical measures to every customer regardless of risk
  3. Publishing customer identities on a public ledger
  4. Identifying and assessing money laundering and terrorist financing risks and applying proportionate measures Correct answer.

Explanation

The risk-based approach requires VASPs to assess their exposure to ML/TF risk and calibrate due diligence and monitoring accordingly. Blanket measures and public disclosure of customer identities are inconsistent with it, and outright refusal without assessment is not the prescribed method.