Threat Modeling ISE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium · select all that apply

   A smart factory is threat modeling its industrial IoT environment. The team is identifying assets to include in the threat model. Which of the following should be classified as assets in the threat model? Select all that apply.

   • AThe Wi-Fi network used by the factory's IoT devices.
   • BThe MQTT broker that relays messages between sensors and the control system.
   • CThe programmable logic controllers (PLCs) that control the assembly line.
   • DThe physical security guards at the factory entrance.
   • EThe production data stored in the historian database.
   Check answers Discussion Select an answer first
2. 22foundation · easy

   Which attack vector is particularly relevant to IoT ecosystems due to the use of wireless communication?

   • APhysical theft of the device from a locked data center
   • BEavesdropping on unencrypted MQTT messages between a sensor and a gateway
   • CSocial engineering of the device's end user to reveal the Wi-Fi password
   • DMalware injection through a USB port on the device
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A medical-device manufacturer is threat modeling a wearable glucose monitor that transmits patient data via Bluetooth Low Energy (BLE) to a smartphone app, which then uploads to a cloud portal. The team is identifying assets and entry points. Which item should be classified as an entry point rather than an asset?

   • AThe cloud portal's authentication service
   • BThe patient's glucose readings stored in the cloud
   • CThe BLE radio interface on the wearable device
   • DThe smartphone app's local database
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An IoT security team has identified several threats to a smart factory. They have limited budget and must decide which threats to mitigate first. Threat 1: a vulnerability in the firmware update process that could allow remote code execution on all robots (likelihood 3, impact 5). Threat 2: a denial-of-service attack on the local network that could halt production (likelihood 4, impact 4). Threat 3: a data breach of customer order information stored in the cloud (likelihood 2, impact 5). Threat 4: physical tampering with sensors that could cause incorrect readings (likelihood 5, impact 2). Using a risk matrix that prioritizes high-impact threats even if likelihood is moderate, which threat should be addressed first?

   • AThreat 3, because it has the highest impact and involves sensitive data.
   • BThreat 2, because it has the highest likelihood and a high impact.
   • CThreat 1, because it has the highest impact and a moderate likelihood, and could affect all robots.
   • DThreat 4, because it has the highest likelihood and could cause safety issues.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A logistics company uses IoT trackers on shipping containers. The threat model identified two threats: Threat A: an attacker can spoof a tracker's location data, causing misrouting (likelihood: medium, impact: high). Threat B: an attacker can drain the tracker's battery by sending excessive wake-up signals (likelihood: high, impact: low). The company has a limited security budget. Which threat should be prioritized, and why?

   • ABoth threats equally, because they affect the same system and should be mitigated together.
   • BThreat B, because the likelihood is high and it will occur more often, making it the higher risk.
   • CNeither threat, because the risk scores are not high enough to justify spending.
   • DThreat A, because the impact is high and the risk score is higher when impact is weighted more heavily.
   Reveal Solution Discussion Select an answer first