Secure Design Principles CASENET Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In the context of threat modeling for a .NET application, what is the primary purpose of creating a data flow diagram (DFD)?

   • ATo define the user interface layout and navigation flow
   • BTo document the physical deployment of servers and network devices
   • CTo identify trust boundaries and understand how data moves through the system
   • DTo list all the software libraries and their versions used in the application
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A .NET application uses a shared service account to access a database. The account has sysadmin privileges. The security team is redesigning the application to follow the principle of least privilege. Which change should they prioritize?

   • ACreate separate database accounts for each application component with only the permissions required for their specific functions.
   • BEncrypt the connection string in the configuration file.
   • CKeep the shared account but change the password regularly.
   • DUse the sysadmin account only for read operations and a different account for writes.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A .NET application has a public registration page and an admin panel. The admin panel is currently accessible under /admin and uses the same authentication cookie as the regular user area. The application also exposes a health check endpoint that returns detailed server information. Which set of changes best applies defense in depth and reduces the attack surface?

   • AMove the admin panel to a random URL and remove the health check endpoint entirely.
   • BUse HTTPS only and rely on the existing cookie for admin authentication.
   • CAdd a role check in the admin panel's code and keep the health check as is.
   • DUse a separate authentication cookie for admin sessions, restrict the health check to return only 'OK', and require a non-standard header for admin access.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   During a threat modeling session for a .NET application, the team identifies that an attacker could intercept and modify data transmitted between the client and server. Which STRIDE category does this threat belong to, and what is the most appropriate mitigation?

   • AInformation Disclosure; mitigate by encrypting data at rest.
   • BDenial of Service; mitigate by implementing rate limiting.
   • CTampering; mitigate by using TLS with strong cipher suites and integrity checks.
   • DSpoofing; mitigate by implementing mutual authentication.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A .NET application is being deployed to a cloud environment. The application has a public-facing API and an internal admin API. The team wants to minimize the attack surface while maintaining the ability to troubleshoot issues. They have decided to use a Web Application Firewall (WAF) and Azure Bastion for administrative access. Which additional measure best reduces the attack surface of the admin API?

   • AExpose the admin API to the internet but require a custom header for access.
   • BEnable diagnostic logging on the admin API and send logs to a SIEM.
   • CUse a shared API key for all admin clients to simplify authentication.
   • DPlace the admin API in a separate subnet with a network security group that only allows traffic from the Bastion host.
   Reveal Solution Discussion Select an answer first