3.1 Analyze Components in a Threat Model 350-201 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company's threat model for its internal HR system shows that the application server and the database are on the same network segment, and the database is accessible from any host on that segment. The team wants to reduce the attack surface. Which change should be recommended?

   • AEncrypt the database files
   • BAdd more firewall rules to allow broader access
   • CSegment the network so only the application server can reach the database
   • DMove the database to a public cloud
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A government contractor's threat modeling team is analyzing a new system that handles classified project data. They are considering potential threat actors. Which threat actor profile should be prioritized as the most likely to have the capability and motivation to target this system?

   • AAn insider with low-level access and no clear motive
   • BA script kiddie using publicly available tools
   • CA hacktivist group wanting to make a political statement
   • DA nation-state actor seeking intelligence on the project
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Why is data flow analysis important in threat modeling?

   • AIt determines the legal requirements for data retention
   • BIt ensures that data is encrypted at rest and in transit
   • CIt helps identify where data is stored, processed, and transmitted, revealing potential attack surfaces and trust boundaries
   • DIt verifies that data is backed up regularly
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A threat modeling team has completed an analysis of a new cloud-based application and identified several high-risk issues. The team needs to present the findings to both the engineering team and the CISO. The engineering team wants actionable technical details, while the CISO wants a summary of business risk. What is the best way to communicate the results?

   • ASend the full threat model document to both and let them extract what they need
   • BOnly present the executive summary to both
   • CCreate two separate reports: one technical for engineering and one executive summary for the CISO
   • DPresent the same detailed technical report to both audiences
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In risk assessment, what does 'likelihood' refer to?

   • AThe potential damage or loss resulting from a successful attack
   • BThe cost of implementing security controls
   • CThe number of vulnerabilities present in a system
   • DThe probability that a given threat will exploit a vulnerability
   Reveal Solution Discussion Select an answer first