Secure Design Principles CASENET Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A .NET application is being redesigned to use a microservices architecture. Each microservice has its own database. The security team wants to apply the principle of least privilege across the services. Which approach is the most appropriate?

   • AUse the same account but restrict access at the application layer.
   • BCreate a separate database account for each microservice with permissions limited to its own database and required operations.
   • CUse a single shared database account for all microservices to simplify management.
   • DGrant each microservice full access to all databases to avoid permission issues.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A team is threat modeling a .NET application that allows users to upload and share documents. The application has a web front end, a file storage service, and a metadata database. The team has identified the following assets: user documents, metadata, and authentication credentials. They have created a data flow diagram showing the web front end accepting uploads, storing files in the storage service, and writing metadata to the database. During the session, they want to prioritize threats. Which step should they perform first to ensure a structured process?

   • AIdentify trust boundaries between the web front end, storage service, and database, and then apply STRIDE to each data flow.
   • BImmediately implement a file type whitelist and size limits to mitigate the most obvious threats.
   • CSelect a threat modeling tool and let it automatically generate a list of threats without manual analysis.
   • DAsk the security team to perform a penetration test on the deployed application.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A team is threat modeling a .NET application that will be deployed in a hybrid cloud environment. The application will process data that is subject to data residency requirements. The team needs to identify threats related to data flows. Which approach best addresses the data residency concern?

   • AInclude data residency requirements as a constraint in the threat model and ensure data flows do not cross prohibited regions.
   • BEncrypt all data in transit and at rest to satisfy data residency requirements.
   • CUse a single cloud region for all processing to simplify the threat model.
   • DIgnore data residency because it is not a security threat.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which secure design principle is best illustrated by a .NET application that uses multiple layers of security controls, such as input validation, authentication, and output encoding, to protect against attacks?

   • ALeast privilege
   • BDefense in depth
   • CFail-safe defaults
   • DSeparation of duties
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A team is conducting a threat modeling session for a new .NET microservices-based order processing system. The system includes a public-facing web API, an internal order service, a message queue, and a legacy SQL database. The team has identified the following assets: customer PII, order details, and payment card data. They have drawn a data flow diagram showing the web API receiving orders, placing messages on the queue, and the order service consuming messages and updating the database. During the session, they want to prioritize threats. Which approach best aligns with the structured threat modeling process?

   • AFocus only on the public-facing web API because it is the only entry point from the internet.
   • BIdentify trust boundaries in the data flow diagram, then classify each data flow using STRIDE, and prioritize based on the impact to the identified assets.
   • CAsk the development team to fix all identified threats immediately without prioritization.
   • DStart by selecting a threat modeling tool, then generate a list of all possible threats and assign a random risk score to each.
   Reveal Solution Discussion Select an answer first