Threat Modeling ISE Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security architect is threat modeling a smart grid system with multiple stakeholders. The team has limited time and must choose a methodology. The system includes legacy devices that cannot be updated, and the primary concern is understanding how an attacker could achieve a specific goal, such as causing a blackout. The team also needs to communicate the analysis to non-technical executives. Which methodology is most appropriate?

   • ADREAD, because it provides numerical risk scores.
   • BSTRIDE, because it covers all threat categories comprehensively.
   • CAttack trees, because they model the attacker's goal and various attack paths, making it easier to communicate to executives.
   • DPASTA, because it aligns with business objectives.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   In the STRIDE threat modeling methodology, what does the 'S' stand for?

   • ASabotage
   • BScanning
   • CSniffing
   • DSpoofing
   Reveal Solution Discussion Select an answer first
4. 43application · medium · select all that apply

   A healthcare IoT system includes wearable patient monitors that transmit vital signs via Bluetooth to a hospital gateway, which forwards data to an electronic health record (EHR) system in the cloud. The threat modeling team is identifying assets. Select all that should be classified as assets in this system.

   • AThe hospital's Wi-Fi network SSID
   • BThe cloud EHR system's authentication credentials
   • CThe Bluetooth communication channel between the wearable and gateway
   • DThe hospital gateway's firmware
   • EPatient vital sign data in transit and at rest
   Check answers Discussion Select an answer first
5. 44expert · hard

   A smart grid company completed a threat model for its distribution automation system. The threat model identified a high-risk threat involving remote access to substation devices. The engineering team wants to implement a mitigation, but the operations team is concerned about downtime during the rollout. The CISO needs to communicate the plan to the board. What is the most effective approach?

   • AImplement the mitigation immediately and inform the board after it is done.
   • BPresent a phased mitigation plan that includes a maintenance window and rollback procedures, and explain the residual risk.
   • CAsk the board to decide without providing details about the operational impact.
   • DCancel the mitigation because the operations team is concerned about downtime.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is a trust boundary in an IoT architecture?

   • AA point where data flows from a lower-trust zone to a higher-trust zone, such as from the internet to a local network
   • BThe point where the device's firmware is updated
   • CA physical barrier that prevents unauthorized access to the device
   • DA firewall rule that blocks all incoming traffic
   Reveal Solution Discussion Select an answer first