3.1 Analyze Components in a Threat Model 350-201 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A security analyst has completed a threat model for a new application and needs to document the findings for the development team. The team needs to understand which threats are most critical and what actions to take. Which documentation format is most effective for this audience?

   • AA prioritized list of threats with recommended mitigations and responsible owners
   • BA data flow diagram with trust boundaries only
   • CA presentation for the executive board
   • DA detailed report with all identified threats and their STRIDE categories
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A hospital's patient portal allows patients to log in, view lab results, and send messages to their care team. The portal is hosted in a public cloud, and the database containing PHI is in a separate VPC. The application server queries the database over a private network connection. During a threat modeling exercise, the team maps the data flow and identifies that the application server can reach the database without any authentication. Which component of the threat model should be flagged as the highest priority to address?

   • AThe trust boundary between the application server and the database
   • BThe mitigation strategy of encrypting data at rest
   • CThe threat actor profile of an external attacker
   • DThe data classification of lab results as PHI
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A threat modeling team is assessing a new online voting system. They are considering the threat actor 'a politically motivated group with moderate technical skills'. Which attack vector is most likely to be used by this actor?

   • AInsider threat from a disgruntled employee
   • BSophisticated zero-day exploits against the voting software
   • CPhysical intrusion into the data center
   • DDistributed denial-of-service (DDoS) attacks to disrupt the voting process
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   During a threat model review, the team discovers that a legacy application stores database credentials in plaintext in a configuration file. The application is critical to business operations and cannot be immediately rewritten. Which mitigation should be implemented first?

   • AEncrypt the configuration file with a strong algorithm
   • BMove the credentials to a hardware security module (HSM)
   • CRestrict file permissions to only the application service account
   • DUse a secrets management solution to store and retrieve credentials at runtime
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which statement best describes the role of threat modeling in the software development lifecycle?

   • AIt is performed only after deployment to identify vulnerabilities in production
   • BIt is a one-time activity conducted at the end of the project to satisfy compliance
   • CIt is a substitute for penetration testing and code review
   • DIt is an ongoing process that helps identify and mitigate security risks early in the design phase
   Reveal Solution Discussion Select an answer first