Secure Design Principles CASENET Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A team is conducting a threat modeling exercise for a .NET application that handles sensitive customer data. They have created a data flow diagram and identified trust boundaries. Which of the following is the most important next step to ensure the threat model is comprehensive?

   • AAsk developers to fix any issues they find during code review.
   • BFocus on the most complex components and ignore simple ones.
   • CPrioritize threats based on the CVSS score of known vulnerabilities in the framework.
   • DIdentify all entry points and apply STRIDE to each data flow crossing a trust boundary.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A team is threat modeling a .NET application that handles financial transactions. They have limited resources and need to prioritize threats for mitigation. Which approach best aligns with a structured threat modeling process?

   • ADefer all threats until after deployment to save time.
   • BFocus only on threats that are easy to fix, regardless of risk.
   • CMitigate all threats equally to ensure comprehensive coverage.
   • DRank threats based on the likelihood and impact, and focus on the highest-risk items first.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A .NET application has an API endpoint that allows users to update their profile information. The endpoint is vulnerable to authorization flaws, allowing users to modify other users' profiles. The team wants to implement a mitigation that follows secure design principles. Which approach is the most effective?

   • AImplement object-level authorization checks in the API to ensure that the authenticated user can only access their own resources.
   • BUse a global authorization filter that only checks if the user is authenticated.
   • CHide the profile update endpoint from the API documentation.
   • DLog all profile update requests and review them periodically.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A .NET application uses a single service account to connect to both the application database and the logging database. The application also exposes a debug endpoint that is enabled in production. The team wants to apply the principle of least privilege and fail-safe defaults. Which change best aligns with these principles?

   • AUse the same service account but enable the debug endpoint only for internal IPs.
   • BEncrypt the connection strings in the web.config and keep the debug endpoint enabled for troubleshooting.
   • CCreate separate service accounts for each database with only the necessary permissions, and disable the debug endpoint in production.
   • DKeep the single service account but restrict its permissions to read-only on both databases.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A .NET application has a password reset feature that sends a reset link to the user's email. The link contains a token that is valid for 24 hours. The security team wants to mitigate the threat of token theft and replay. Which mitigation strategy should be applied?

   • AAllow the token to be used multiple times within the 24-hour window to avoid user frustration.
   • BUse a longer token and store it in the database without hashing.
   • CSend the token in the email body and also in the URL for convenience.
   • DShorten the token expiration to 15 minutes and invalidate the token after a single use.
   Reveal Solution Discussion Select an answer first