Threat Modeling Concepts ECDE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following represents the correct order of steps in a typical threat modeling process?

   • ADecompose the system, identify threats, prioritize risks, and apply mitigations
   • BIdentify threats, decompose the system, apply mitigations, and prioritize risks
   • CPrioritize risks, apply mitigations, decompose the system, and identify threats
   • DApply mitigations, decompose the system, identify threats, and prioritize risks
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key goal of threat modeling in the context of software development?

   • ATo create a comprehensive list of all possible software bugs in the codebase
   • BTo prioritize security efforts based on the likelihood and impact of potential threats
   • CTo ensure that the software is compliant with all relevant industry regulations
   • DTo document the functional requirements of the software system
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to embed threat modeling into its DevSecOps pipeline so that security analysis happens continuously as code changes. The team is concerned about slowing down developers. Which approach best balances early and continuous security analysis with developer velocity?

   • ARequire developers to manually update a threat model document before every merge.
   • BAutomate lightweight threat modeling checks in the CI pipeline that flag changes to data flows or trust boundaries for review.
   • CRun a full threat modeling session only at the start of each project and then rely on code reviews.
   • DPerform a detailed threat model only after a security incident occurs.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A DevSecOps team is threat modeling a new feature that allows users to upload files. They have created a data flow diagram and identified that the file storage service is a trust boundary. They are now at the step of identifying threats. Which approach is most aligned with the threat modeling process?

   • AUse STRIDE to systematically examine each element in the data flow for spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege
   • BSkip threat identification and go straight to risk assessment
   • CAsk the security team to perform a penetration test on the feature
   • DImmediately implement antivirus scanning on the file upload endpoint
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A DevSecOps team is threat modeling a new API gateway. They have created a data flow diagram and identified trust boundaries. What should they do next in the threat modeling process?

   • AIdentify potential threats to each component and data flow, then rank them by risk.
   • BDeploy the API gateway to production and monitor for attacks.
   • CWrite a security requirements document and send it to the compliance team.
   • DImmediately implement security controls for every possible threat.
   Reveal Solution Discussion Select an answer first