Understanding Application Security, Threats, and Attacks CASENET Practice Questions (Page 9)

Questions 41–44

1. 41application · medium

   A team is threat-modeling a new .NET microservice that processes payment transactions. The service communicates with an external payment gateway over HTTPS. During the session, the team identifies a threat where an attacker on the network could intercept and modify the payment request before it reaches the gateway. Which STRIDE category does this threat fall under, and which control is most appropriate?

   • ATampering; enforce certificate pinning and integrity checks
   • BSpoofing; use mutual TLS
   • CDenial of Service; add retry logic
   • DInformation Disclosure; encrypt the payload with a symmetric key
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A development team is building a .NET application that allows users to upload and share documents. The application must comply with a regulation that requires data to be encrypted at rest. The team is considering two options: (A) encrypt the files using the application's own encryption key and store the key in the web.config, or (B) use the hosting provider's managed encryption service. The security architect notes that the application must also protect against a compromised application server. Which option is more secure, and why?

   • AOption B, because the managed service separates key management from the application, reducing the risk of key exposure if the server is compromised.
   • BOption A, because the application controls the encryption key and can rotate it independently.
   • COption A, because the application can use a hardware security module (HSM) to store the key.
   • DBoth options are equally secure because encryption is encryption.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A team is using the DREAD model to prioritize threats for a .NET application. They have identified two threats: Threat A has a Damage of 9, Reproducibility of 8, Exploitability of 7, Affected Users of 6, and Discoverability of 5. Threat B has a Damage of 8, Reproducibility of 7, Exploitability of 6, Affected Users of 9, and Discoverability of 8. Which threat should be prioritized, and why?

   • AThreat B, because its overall DREAD score is higher
   • BThreat B, because it affects more users
   • CThreat A, because its damage score is higher
   • DThreat A, because it is more exploitable
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A .NET application has a password reset feature that sends a reset link to the user's email. An attacker discovers that the reset token is generated using `Guid.NewGuid().ToString()` and is included in the URL. Which attack is most likely to succeed, and what is the best mitigation?

   • ACross-Site Request Forgery (CSRF); add an anti-CSRF token to the reset form.
   • BToken theft via referrer leakage; use a random cryptographic token and do not place it in the URL.
   • CSession fixation; regenerate the session ID after password reset.
   • DBrute force; implement account lockout after failed attempts.
   Reveal Solution Discussion Select an answer first