Threat Modeling and Vulnerability Assessment CSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security administrator is using OpenVAS to scan a cloud-hosted web application. The scan completes and reports a critical vulnerability in the web server version. However, the administrator knows that the web server is behind a load balancer that terminates TLS and forwards traffic on HTTP. What should the administrator do to ensure the scan results are accurate?

   • AIgnore the scan results because the load balancer protects the web server.
   • BDisable the TLS termination on the load balancer and re-run the scan.
   • CConfigure the scan to test the load balancer's public IP address and include the HTTP port that the load balancer forwards to.
   • DRun the scan directly against the web server's private IP address to bypass the load balancer.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is using STRIDE to threat model a cloud-based application that uses a managed database service. The team is concerned about the threat of data tampering. Which control is most effective in mitigating this threat?

   • AEnable multi-factor authentication (MFA) for all database users.
   • BEnable database encryption at rest and in transit.
   • CUse a web application firewall (WAF) to block SQL injection attacks.
   • DImplement strict access controls and audit logging on the database.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security architect is using the PASTA methodology to threat model a new cloud-based payment processing system. The team has already defined the business objectives and technical scope. According to PASTA, what should they do next?

   • AImmediately enumerate vulnerabilities using a vulnerability scanner
   • BDecompose the application to identify data flows and trust boundaries
   • CConduct a penetration test on the production environment
   • DDevelop a risk mitigation strategy
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security analyst is using OpenVAS to scan a cloud-hosted web application. The scan completes and reports a critical vulnerability in the web server version. What is the next step in the vulnerability assessment process before remediation?

   • AImmediately apply the vendor patch to the web server
   • BAnalyze the scan results to confirm the vulnerability is not a false positive
   • CReboot the web server to clear the vulnerability
   • DDelete the scan report to avoid alert fatigue
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is reviewing a cloud environment and discovers that an Amazon S3 bucket containing customer data is publicly readable. The bucket was created by a developer who used a pre-configured script. The analyst wants to identify the root cause and prevent similar issues. Which approach best combines threat modeling and vulnerability assessment to address this issue?

   • AImmediately delete the bucket and recreate it with private ACLs, then move on to other tasks.
   • BImplement a bucket policy that denies all public access, and then run a penetration test to verify the fix.
   • CPerform a threat model focused on the data flow to the S3 bucket, then run a vulnerability scan using a tool like Nessus to detect misconfigured bucket policies.
   • DUse AWS Trusted Advisor to check for public buckets and then enable CloudTrail to log all S3 access.
   Reveal Solution Discussion Select an answer first