Threat Modeling CASEJAVA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Java application logs all user actions, including financial transactions. The threat model identifies a risk that a user could deny performing a transaction. Which STRIDE category does this threat fall under, and what is the best mitigation?

   • ASpoofing — implement strong authentication.
   • BInformation Disclosure — encrypt the logs.
   • CRepudiation — implement secure audit logging with digital signatures.
   • DTampering — use checksums to detect log modification.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A team is decomposing a Java application for threat modeling. The application has a web frontend, a REST API, a message queue, and a worker process that processes messages. The team is creating a data flow diagram (DFD). Which of the following is the most accurate way to represent the message queue in the DFD?

   • AAs a process, because it actively transforms messages.
   • BAs a data store, because it stores messages temporarily between the API and the worker.
   • CAs a trust boundary, because it separates the API from the worker.
   • DAs an external entity, because it is a separate system.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A Java application allows users to upload files that are then processed by a backend service. The threat model identifies a threat where an attacker uploads a file with a malicious payload that is executed by the backend. The team is considering two mitigations: (1) scan all uploads with an antivirus engine, and (2) run the backend service in a sandboxed environment. The team has budget for only one mitigation. Which mitigation is more effective in reducing the risk?

   • ANeither is effective; the team should disable file uploads entirely.
   • BBoth are equally effective, so the team should choose based on cost.
   • CSandboxing, because it contains the impact of a malicious file even if it is executed.
   • DAntivirus scanning, because it prevents malicious files from being stored in the first place.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is it important to document a threat model clearly?

   • ATo provide a reference for developers, testers, and stakeholders to understand security decisions and implement mitigations
   • BTo create a marketing document for the application
   • CTo satisfy legal requirements for data protection
   • DTo replace the need for security testing
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In threat modeling, what is an entry point?

   • AA boundary that separates different trust zones within the system
   • BA point where an external entity interacts with the application, such as an API or user interface
   • CA component that processes data, such as a business logic module
   • DA location where data is stored, such as a database or file system
   Reveal Solution Discussion Select an answer first