Threat Modeling Concepts ECDE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the first step in a typical threat modeling process?

   • AIdentify potential threats to the system
   • BDecompose the system to understand its components, data flows, and trust boundaries
   • CDocument the results of the threat modeling exercise
   • DMitigate identified threats by implementing controls
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In which phase of the software development lifecycle is threat modeling most effectively performed?

   • ADuring the deployment phase, just before going live
   • BDuring the testing phase, after the code is fully written
   • CDuring the design phase, before implementation begins
   • DDuring the maintenance phase, after the software is released
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A DevSecOps team is adopting threat modeling for the first time. They want to ensure it becomes a regular part of their development process without slowing down delivery. What is the best way to integrate threat modeling into their DevSecOps pipeline?

   • AUse an automated tool to scan the codebase and generate a threat model automatically
   • BCreate lightweight threat models for each feature and review them in the design phase
   • CRun a full threat modeling workshop after every release
   • DPerform threat modeling only when a major architectural change is planned
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company is integrating threat modeling into its DevSecOps pipeline. The security team wants to ensure that threat models are updated as code changes, but developers are concerned about the overhead. The team has decided to automate threat model generation. However, they are worried about false positives and alert fatigue. What is the best way to address this?

   • AUse automated threat modeling only for critical components and require manual review for all other changes.
   • BImplement automated threat modeling with a triage process that filters low-risk findings and escalates high-risk ones to human reviewers.
   • CDisable automated threat modeling and rely on manual reviews.
   • DUse a single threat modeling tool and ignore its output if it produces too many alerts.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is developing a new IoT device that collects health data. The DevSecOps team is performing threat modeling. They have identified several threats, but the product manager wants to deprioritize security to meet a launch deadline. The team needs to communicate the importance of threat modeling. What is the most effective way to justify the effort?

   • AThreaten to quit if security is deprioritized.
   • BDemonstrate how threat modeling can identify design flaws that would be costly to fix after launch.
   • CExplain that threat modeling is a compliance requirement that cannot be skipped.
   • DAgree to skip threat modeling and rely on penetration testing after launch.
   Reveal Solution Discussion Select an answer first