Threat Modeling CASEJAVA Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of threat modeling in the secure software development lifecycle?

   • ATo document the system's architecture for compliance audits and regulatory reporting
   • BTo identify and prioritize potential security threats to the system so that mitigations can be designed early
   • CTo ensure the application meets functional requirements and user acceptance criteria
   • DTo perform penetration testing on the final application to discover exploitable vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A team is creating a data flow diagram for a Java application that allows users to upload and share documents. They have identified a data flow from the user's browser to the web server, then to the application server, and finally to the database. Which element of the DFD should be used to represent the user's browser?

   • AData store
   • BProcess
   • CExternal entity
   • DData flow
   Reveal Solution Discussion Select an answer first
4. 33application · easy

   During threat modeling of a Java application, the team is identifying assets and entry points. They have listed the following: user credentials, the login form, the database, and the REST API. Which of these is an entry point?

   • AThe REST API
   • BThe login form
   • CUser credentials
   • DThe database
   Reveal Solution Discussion Select an answer first
5. 34application · easy

   A security team is evaluating threat modeling methodologies. They need a methodology that is simple to use and focuses on categorizing threats into six categories. Which methodology is the best fit?

   • ADREAD
   • BAttack trees
   • CSTRIDE
   • DPASTA
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A Java-based e-commerce application allows customers to upload profile images. The images are stored in an Azure Blob Storage container with public read access, and the application generates a signed URL for each upload. During a threat modeling session, the team identifies that an attacker could upload a malicious file that is later served to other users. Which STRIDE category best describes this threat, and what is the most appropriate mitigation?

   • ADenial of Service — implement rate limiting on the upload endpoint to prevent resource exhaustion.
   • BInformation Disclosure — restrict public read access and use private containers with SAS tokens.
   • CSpoofing — require authentication for all uploads and use signed URLs with short expiration.
   • DTampering — validate file content and enforce strict file-type allowlisting on the server before storage.
   Reveal Solution Discussion Select an answer first