Threat Modeling ISE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A smart vending machine company is threat modeling its product. The machine accepts credit card payments and connects to a payment gateway over the internet. The team is identifying threats specific to the IoT ecosystem. Which threat is most directly related to the vending machine's physical unattended nature?

   • AAn attacker opens the machine's casing and connects a debug probe to the exposed UART port to extract payment data.
   • BAn attacker compromises the vending machine's management server to change product prices.
   • CAn attacker performs a denial-of-service attack on the payment gateway, preventing transactions.
   • DAn attacker intercepts the internet traffic between the machine and the payment gateway.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of risk scoring in threat modeling?

   • ATo assign a monetary value to each threat for insurance purposes
   • BTo prioritize threats based on their risk level so that the most critical ones are addressed first
   • CTo eliminate all risks completely from the system
   • DTo document threats for compliance without affecting decision-making
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a key element to include in a threat model document?

   • AThe company's financial statements
   • BThe personal opinions of the security team about the developers
   • CThe marketing strategy for the IoT product
   • DA list of identified threats and their risk ratings
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which threat modeling methodology uses a tree-like structure to represent possible attack paths to a system?

   • ADREAD
   • BCVSS
   • CAttack trees
   • DSTRIDE
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A medical device manufacturer is threat modeling a new insulin pump. The pump communicates with a smartphone app via Bluetooth Low Energy (BLE) and with the cloud via Wi-Fi. The team begins by drawing data flow diagrams and applying STRIDE. During the session, they identify spoofing of the smartphone app as a threat. Which STRIDE category does this threat fall under, and what is the most appropriate next step in the threat modeling process?

   • AIt falls under Tampering; the next step is to immediately implement encryption on the BLE link to prevent unauthorized modification of data.
   • BIt falls under Denial of Service; the next step is to add redundancy to the cloud communication channel to ensure availability.
   • CIt falls under Spoofing; the next step is to identify the trust boundary between the pump and the smartphone app and then evaluate the impact and likelihood of the threat.
   • DIt falls under Information Disclosure; the next step is to document the threat in the final report and present it to stakeholders.
   Reveal Solution Discussion Select an answer first