Threat Modeling ISE Practice Questions (Page 11)

Questions 51–51

1. 51application · medium

   A home security camera manufacturer identified a threat where an attacker can intercept video streams between the camera and the cloud because the camera uses unencrypted RTSP. The risk score is high. The team is developing mitigation strategies. Which mitigation is most appropriate and aligned with the threat modeling process?

   • AMove the camera to a different network segment and rely on network segmentation to prevent interception.
   • BIncrease the camera's video resolution so that intercepted streams are less useful to attackers.
   • CDisable the camera's cloud feature entirely to eliminate the threat, and inform users they must use local recording only.
   • DImplement TLS for the video stream and update the threat model to document the control and its residual risk.
   Reveal Solution Discussion Select an answer first