Threat Modeling Frameworks KCSA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the purpose of using threat libraries in threat modeling?

   • ATo generate compliance reports for auditors.
   • BTo automatically patch vulnerabilities in the system.
   • CTo provide a catalog of known threats and vulnerabilities that can be referenced during analysis.
   • DTo store the source code of the application.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In a DevSecOps practice, at which stage of the CI/CD pipeline is threat modeling most effectively integrated?

   • ADuring the deployment phase, after the application is live.
   • BDuring the testing phase, just before release.
   • CDuring the design phase, before code is written.
   • DOnly after a security incident occurs.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team is using an automated threat modeling tool that generates data flow diagrams from Kubernetes manifests. The tool identifies a potential threat of unauthorized access to a database from a microservice. The team wants to validate this threat before adding it to the risk register. Which action is most appropriate?

   • AImmediately add the threat to the risk register without further analysis
   • BIgnore the threat because automated tools are always accurate
   • CReview the network policies and service accounts to confirm if the microservice should have access
   • DAsk the developer to change the code to remove the database connection
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   During a threat modeling session for a Kubernetes-based application, the team identifies a threat that involves a compromised container escaping to the host. They are debating whether to prioritize this threat. The application runs in a managed Kubernetes service (e.g., EKS, AKS, GKE). Which consideration is most important in this decision?

   • AThe managed service provider is responsible for securing the host, so the threat is not relevant
   • BThe threat is unlikely because managed Kubernetes services are immune to container escapes
   • CThe impact of container escape could affect other tenants and the underlying infrastructure
   • DThe threat should be deprioritized because the provider will patch the host automatically
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is threat modeling a Kubernetes cluster that runs multiple microservices. They are concerned about threats that could arise from the orchestration layer itself, such as unauthorized access to the Kubernetes API server. Which type of threat modeling activity would best address this concern?

   • AFocus only on the microservices and their data flows
   • BInclude the Kubernetes control plane components in the DFD and analyze threats against them
   • CUse a threat library for traditional web applications
   • DPerform a vulnerability scan on the container images
   Reveal Solution Discussion Select an answer first