Threat Modeling CASENET Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A .NET application has a public-facing API that accepts file uploads. The DFD shows that files are stored in a directory on the web server. The team identifies a threat where an attacker uploads a file with a malicious payload and then accesses it via a direct URL. Which combination of mitigations provides the most effective defense in depth?

   • AUse a CDN to serve the files and restrict access with signed URLs.
   • BValidate the file extension and content type on the server side.
   • CStore files in a separate directory outside the web root, use random filenames, and disable script execution in that directory.
   • DEncrypt the files at rest and require authentication to download them.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A development team is integrating threat modeling into their SDLC. They want to ensure that security requirements identified during threat modeling are actually implemented. Which practice is most effective for this goal?

   • ADocument findings in a separate security report and share it with the team.
   • BTrack threat modeling findings as security requirements in the same backlog as development tasks.
   • CRely on the security team to fix all identified threats after development.
   • DCreate a threat modeling document and store it in the project wiki.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A .NET e-commerce application allows users to upload profile photos. During a threat modeling session, the team identifies that an attacker could upload a malicious file disguised as an image, which the server then stores and serves back to other users. Using STRIDE, which threat category does this scenario primarily represent, and what is the most appropriate mitigation?

   • AInformation disclosure — encrypt all uploaded files at rest.
   • BSpoofing — require re-authentication before any file upload operation.
   • CElevation of privilege — run the upload handler under a least-privilege service account.
   • DTampering — implement strict file type validation and content inspection before storing the file.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A .NET application has a threat where an attacker can upload a file that executes server-side code. The team is evaluating mitigations. Which mitigation is the most effective for this specific threat?

   • ARename uploaded files with a random name and extension.
   • BRestrict file upload size to 1 MB.
   • CUse a WAF to filter upload requests.
   • DStore uploaded files in a separate domain and never execute them from the application's content directory.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A development team is integrating threat modeling into their agile process. They have limited time and need to ensure that high-risk threats are addressed before release. Which approach best balances speed and thoroughness?

   • ASkip threat modeling for features that are not internet-facing.
   • BConduct threat modeling only at the end of the project, just before release.
   • CPerform a full threat modeling session for every user story, even if it delays the sprint.
   • DUse a lightweight threat modeling approach that focuses on high-risk features and updates the threat model as the design evolves.
   Reveal Solution Discussion Select an answer first