Threat Modeling CASENET Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of threat modeling in the secure software development lifecycle?

   • ATo ensure the application meets functional requirements and user expectations
   • BTo identify and prioritize potential security threats to the application so that mitigations can be designed early
   • CTo document the application's architecture for compliance audits
   • DTo perform penetration testing on the application after it is deployed
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security lead is choosing a threat modeling methodology for a new .NET microservices application. The team needs to systematically categorize threats by their nature (e.g., spoofing, tampering) and also assign a numeric risk score to prioritize fixes. Which combination of methodologies best meets both needs?

   • AUse attack trees to identify threats and STRIDE to score them.
   • BUse DREAD to categorize threats and attack trees to prioritize them.
   • CUse STRIDE to categorize threats and DREAD to score and prioritize them.
   • DUse STRIDE alone, as it provides both categorization and numeric scoring.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   During threat modeling of an ASP.NET Core API, the team identifies two threats: (1) an unauthenticated attacker can brute-force the login endpoint, and (2) a low-privileged user can access another user's data by manipulating an ID in the URL. Using DREAD for prioritization, which threat should be addressed first?

   • AThreat 2, because it has a higher damage potential and is more easily exploitable.
   • BThreat 1, because it affects the entire system, while Threat 2 only affects one user.
   • CThreat 1, because it has a higher damage potential and can lead to account takeover.
   • DBoth threats equally, because DREAD scores are subjective and cannot be compared.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In the STRIDE model, which threat category involves an attacker pretending to be another user or system?

   • ATampering
   • BRepudiation
   • CInformation Disclosure
   • DSpoofing
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A development team is new to threat modeling and asks when it should be performed in the SDLC. Which guidance is most appropriate?

   • AAt the beginning of the project and whenever significant changes are made to the architecture.
   • BAfter the application is deployed, to identify real-world attacks.
   • COnly when a security incident occurs.
   • DOnly during the design phase, before any code is written.
   Reveal Solution Discussion Select an answer first