Threat Modeling CASENET Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company uses a threat modeling tool that automatically generates DFDs from .NET code. The tool flags a data flow between the web server and the database as high risk. However, the development team argues that the database is only accessible from the internal network. Which action should the security team take?

   • AAccept the risk because the database is not internet-facing.
   • BDisable the tool's warning because it is a false positive.
   • CInvestigate the data flow to determine if the risk is valid and whether additional controls are needed.
   • DMove the database to a public subnet to make it easier to monitor.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A .NET application uses JSON Web Tokens (JWT) for authentication. A threat modeler notices that the token validation does not check the 'aud' claim. Which STRIDE category is most directly affected, and what is the best mitigation?

   • ASpoofing — validate the 'aud' claim to ensure the token is intended for this application.
   • BInformation disclosure — encrypt the token payload.
   • CDenial of service — rate-limit token validation requests.
   • DTampering — sign the token with a stronger algorithm.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A .NET application has a threat where an attacker can intercept and modify data in transit between the client and the server. The team is evaluating mitigations. Which mitigation is the most direct and effective for this specific threat?

   • AImplement input validation on the server to reject malformed data.
   • BEnforce TLS 1.2 or higher on all client-server communications.
   • CUse a Web Application Firewall (WAF) to filter incoming requests.
   • DHash all data at the application layer before sending.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A team is threat modeling a new .NET application that accepts file uploads from authenticated users and stores them in Azure Blob Storage. During the 'identify assets' step, which item is the most important asset to document for this application?

   • AThe Azure Blob Storage account key, as it controls access to the storage.
   • BThe web server's IP address, as it is the entry point for requests.
   • CThe uploaded files themselves, as they are the primary data being processed and stored.
   • DThe user's authentication credentials, as they are used to access the application.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is typically the FIRST step in a systematic threat modeling process?

   • ADeploy the application and monitor for security incidents
   • BDecompose the application and understand its architecture, including assets, entry points, and trust boundaries
   • CPropose mitigation strategies for each identified threat
   • DIdentify and prioritize threats based on likelihood and impact
   Reveal Solution Discussion Select an answer first