Threat Modeling Concepts ECDE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A DevSecOps team is threat modeling a new system that uses a mix of on-premises and cloud components. They have created a data flow diagram and identified trust boundaries. They are now at the stage of identifying threats. The team is using STRIDE. Which approach is most effective?

   • AApply STRIDE to each component and data flow in the diagram.
   • BUse DREAD instead of STRIDE because it is more comprehensive.
   • CApply STRIDE only to the cloud components because they are more exposed.
   • DApply STRIDE only to the trust boundaries.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large enterprise is adopting DevSecOps and wants to introduce threat modeling to multiple development teams. The teams use different methodologies (some use STRIDE, some use PASTA) and have varying levels of security expertise. The security team wants to ensure consistency and continuous improvement. They also need to integrate threat modeling into their CI/CD pipelines. What is the best approach?

   • AEliminate threat modeling and rely on automated security scanning tools.
   • BHire external consultants to perform all threat modeling.
   • CAllow each team to choose its own methodology, but require that threat models be stored in a common repository and reviewed by the security team.
   • DMandate a single methodology (e.g., STRIDE) for all teams to ensure consistency.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A team is threat modeling a new authentication service. They have identified that an attacker could brute-force the login endpoint. According to the threat modeling process, what should they do after identifying this threat?

   • AIgnore it because brute-force attacks are common and expected
   • BDocument the threat, assess its likelihood and impact, and decide on a mitigation strategy
   • CImmediately implement account lockout and rate limiting
   • DReport it to the security team and move on to the next feature
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A product owner is skeptical about the value of threat modeling for a small internal tool. Which benefit should the DevSecOps engineer highlight to justify the effort?

   • AIt will guarantee compliance with all regulations
   • BIt will reduce the number of security vulnerabilities found in production
   • CIt will eliminate the need for security testing
   • DIt will automatically fix all security issues
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is developing a new SaaS product. The DevSecOps team wants to integrate threat modeling into their agile development process. They are concerned that threat modeling will slow down sprints. What is the best way to integrate threat modeling without slowing down development?

   • APerform threat modeling only after a security incident occurs.
   • BSkip threat modeling and rely on automated security testing.
   • CPerform a lightweight threat modeling session at the start of each sprint, focusing on new features and changes.
   • DPerform a full threat model for every user story.
   Reveal Solution Discussion Select an answer first