Secure Design Principles CASENET Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When analyzing the attack surface of a .NET application, which of the following should be considered an entry point?

   • AThe internal business logic layer that processes orders
   • BThe SQL Server database schema
   • CThe database connection string stored in web.config
   • DAn ASP.NET Web API endpoint that accepts JSON input
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A .NET application has a feature that allows users to export their data as a CSV file. The export is generated on the server and stored in a temporary folder, then served to the user via a link. The application uses a shared hosting environment where multiple applications run under the same service account. The security team has identified a threat: an attacker could potentially access another user's exported file by guessing the filename. Which STRIDE category best describes this threat, and which mitigation is most appropriate?

   • ASpoofing; require the user to re-authenticate before downloading the file.
   • BInformation Disclosure; use a random, unguessable filename and set the file permissions to only allow the specific user to access it.
   • CTampering; store the file in a database and serve it through a parameterized endpoint.
   • DDenial of Service; limit the file size and use a CDN to serve the files.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A team is threat modeling a .NET application that processes credit card payments. The application has a web front end, a payment processing service, and a database that stores transaction logs. The team has identified the following assets: cardholder data, transaction logs, and encryption keys. They have created a data flow diagram showing the web front end sending payment details to the payment service, which encrypts the data and stores it in the database. During the session, they identify a threat: an attacker could tamper with the transaction amount before it is encrypted. Which step in the threat modeling process should the team take next to address this threat?

   • ARedraw the data flow diagram to ensure it is accurate before proceeding.
   • BImmediately implement a digital signature on the transaction amount to prevent tampering.
   • CAsk the development team to review the code for input validation issues.
   • DDetermine the risk rating by considering the likelihood and impact of the tampering threat, and then decide on a mitigation.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A .NET web application exposes an administrative dashboard that is used by a small team of IT staff. The dashboard is on the same IIS site as the public-facing customer portal. During a threat modeling session, the team identifies that if an attacker compromises a low-privileged customer account, they could potentially access the admin dashboard due to shared application pools. Which design change best applies the principle of least privilege and reduces the attack surface?

   • AMove the admin dashboard to a separate IIS site with its own application pool and enforce Windows authentication with a dedicated admin group.
   • BEncrypt the dashboard's configuration section using aspnet_regiis -pe to protect connection strings.
   • CDisable directory browsing on the admin folder and remove the 'Everyone' read permission from the physical directory.
   • DAdd a role check in the dashboard's Page_Load event to verify the user is in the 'Admins' role before rendering any content.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which statement best describes the role of trust boundaries in a threat model for a .NET application?

   • AThey represent the exact lines of code where vulnerabilities are located
   • BThey define the physical location of servers in different data centers
   • CThey indicate where encryption must be applied to all data at rest
   • DThey separate components with different levels of privilege or trust
   Reveal Solution Discussion Select an answer first