Threat Modeling CASENET Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which mitigation strategy is most appropriate for a threat involving an attacker intercepting data transmitted between the client and server?

   • AUsing encryption such as TLS for data in transit
   • BAdding input validation
   • CImplementing strong authentication
   • DImplementing logging and auditing
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A team is starting a threat modeling exercise for a .NET application. They have created a DFD and identified the assets. What is the next logical step in the systematic threat modeling process?

   • AImplement mitigations for all identified assets.
   • BImmediately brainstorm all possible threats without any structure.
   • CDocument the DFD and assets, then stop the process.
   • DIdentify entry points and trust boundaries to understand where threats can enter and where trust changes.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A .NET web application logs all user actions to a SQL database. During threat modeling, the team identifies that a user could deny performing a transaction because the logs do not include sufficient evidence. Which STRIDE category does this threat fall under, and what is the best mitigation?

   • ASpoofing — add multi-factor authentication to the login process.
   • BInformation disclosure — encrypt the log database at rest.
   • CTampering — restrict access to the log database to admins only.
   • DRepudiation — implement tamper-evident logging with digital signatures or a write-once log store.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A team is conducting a threat modeling session for a .NET application. They have identified the assets, entry points, and trust boundaries. Now they are brainstorming potential threats. Which technique is most effective for ensuring comprehensive threat identification?

   • AAsk each team member to list threats independently and then combine the lists.
   • BUse a threat modeling tool to automatically generate threats without manual review.
   • CUse a structured approach like STRIDE to systematically walk through each data flow and trust boundary.
   • DReview only the most critical data flows identified in the DFD.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   In a DFD for a .NET application, a data flow from the web server to the database is identified as vulnerable to SQL injection. Which mitigation is most aligned with the threat modeling principle of 'defense in depth'?

   • AEncrypt the connection between the web server and the database.
   • BImplement input validation on the web server and use least-privilege database accounts.
   • CDisable error messages that reveal database details.
   • DUse parameterized queries in the data access layer.
   Reveal Solution Discussion Select an answer first