Threat Modeling CASEJAVA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a data flow diagram in threat modeling?

   • ATo visualize how data moves through the system and identify potential threat surfaces
   • BTo document the system's hardware and network infrastructure
   • CTo provide a detailed design of the user interface
   • DTo list all the security controls implemented in the system
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A Java application uses a shared database connection string stored in a configuration file. The threat model identifies a risk of an attacker reading the file and gaining database access. Which mitigation is most appropriate?

   • AStore the connection string in a secure vault and use environment variables.
   • BUse a less privileged database account.
   • CChange the database password frequently.
   • DEncrypt the configuration file with a hard-coded key.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A threat modeling session has produced a large number of threats for a Java application. The team needs to document the results in a way that supports future design decisions. What is the most important element to include in the threat model documentation?

   • AThe list of all possible threats without any prioritization.
   • BThe exact code snippets of the application.
   • CA prioritized list of threats with associated mitigations and residual risk.
   • DThe names of the team members who participated in the session.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which threat modeling methodology uses a tree structure to represent attack goals and the various ways an attacker could achieve them?

   • ASTRIDE
   • BAttack trees
   • CDREAD
   • DPASTA
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security architect is choosing a threat modeling methodology for a Java application that processes financial transactions. The team needs to align threat modeling with business objectives and also perform a detailed risk analysis. Which methodology would best fit these requirements?

   • ADREAD, because it is a quantitative risk scoring model.
   • BAttack trees, because they graphically represent attacker goals and paths.
   • CPASTA, because it is a risk-centric methodology that aligns technical threats with business impact.
   • DSTRIDE, because it provides a simple mnemonic for categorizing threats.
   Reveal Solution Discussion Select an answer first