Threat Modeling ISE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A city is deploying smart streetlights that connect via a mesh network to a central management system. Each streetlight has a firmware update mechanism that checks for updates over the network. During threat modeling, the team wants to identify the most likely attack vector for compromising the entire fleet. Which attack vector should be considered the highest risk?

   • AJamming the mesh network to cause a temporary denial of service.
   • BCompromising the firmware update mechanism to distribute malicious firmware to all streetlights.
   • CPhysically tampering with a single streetlight to extract its encryption keys.
   • DIntercepting unencrypted management traffic to read status reports.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A team is threat modeling a smart lock system. They want to systematically identify threats by considering the system's assets and the ways they could be attacked. They decide to use an attack tree. What is the primary advantage of using an attack tree over STRIDE in this scenario?

   • AAttack trees allow the team to model multiple attack paths to a specific goal, such as unauthorized door unlock.
   • BAttack trees automatically assign risk scores to each node, eliminating the need for manual risk assessment.
   • CAttack trees focus on the system's trust boundaries, making them better for scoping the threat model.
   • DAttack trees are easier to create than STRIDE because they do not require data flow diagrams.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the goal of a mitigation strategy in threat modeling?

   • ATo reduce the risk of a threat to an acceptable level through security controls or design changes
   • BTo completely eliminate all possible threats
   • CTo document threats without taking any action
   • DTo transfer all risk to a third party
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A utility company is threat modeling a smart meter network. The meters communicate with a local gateway via Zigbee, and the gateway sends data to the utility's cloud over the internet. The team is identifying entry points and trust boundaries. Which of the following should be considered a trust boundary?

   • AThe cloud database that stores meter readings, because it is the most sensitive asset in the architecture.
   • BThe Zigbee radio interface on the smart meter, because it is exposed to the physical environment and accepts unauthenticated commands.
   • CThe internet connection between the gateway and the cloud, because it is the only place where data leaves the local network.
   • DThe gateway's power supply, because a power outage could disrupt communication.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A smart agriculture company completed a threat model for its soil sensor network. The team identified several threats and assigned risk scores. The CISO wants to communicate the findings to the board of directors, who are not technical. What is the most effective way to present the threat model?

   • AProvide a copy of the full threat model document and ask them to read it before the meeting.
   • BPresent a prioritized risk register with business impact statements and recommended mitigation timelines.
   • CShow detailed data flow diagrams with all entry points and trust boundaries labeled.
   • DList every identified threat with its STRIDE category and DREAD score.
   Reveal Solution Discussion Select an answer first