Threat Modeling Concepts ECDE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A DevSecOps team is threat modeling a legacy system that is being migrated to the cloud. They have limited knowledge of the system's architecture. What is the first step they should take?

   • ADecompose the system by creating a data flow diagram and identifying trust boundaries.
   • BChoose a threat modeling methodology.
   • CIdentify threats based on the system's functionality.
   • DImplement mitigations for known vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does threat modeling integrate into a DevSecOps pipeline to support continuous security?

   • ABy replacing all automated security testing with manual threat modeling sessions
   • BBy limiting threat modeling to the security team without involving developers
   • CBy conducting threat modeling only once after the system is fully deployed
   • DBy performing threat modeling early in the design phase and revisiting it as the system evolves
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which threat modeling methodology is primarily focused on classifying threats into categories such as Spoofing, Tampering, and Repudiation?

   • ACVSS
   • BSTRIDE
   • CDREAD
   • DPASTA
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A team is threat modeling a new online banking application. They have completed the system decomposition and identified threats using STRIDE. They are now at the mitigation planning stage. What should they do to ensure the mitigations are effective?

   • AImplement all mitigations immediately without prioritization
   • BOnly implement mitigations for threats with a high DREAD score
   • CAssign each mitigation to a team member and track it in the backlog
   • DDocument the mitigations in a wiki and move on to the next feature
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A startup is building a mobile app that handles health data. They want to integrate security early in the SDLC. The CTO asks the DevSecOps engineer to explain why threat modeling is valuable at this stage. Which statement best explains the purpose of threat modeling in the SDLC?

   • AIt helps identify potential security issues in the design phase, when they are cheaper to fix than after deployment.
   • BIt is a one-time activity performed just before release to check for compliance.
   • CIt is only useful for large enterprises with dedicated security teams.
   • DIt replaces the need for penetration testing and code reviews.
   Reveal Solution Discussion Select an answer first