CASE App Security Engineer Threat Modeling 3

Question 1

In a data flow diagram (DFD) used for threat modeling, what does a dashed line or boundary box typically represent?

Accepted Answer

A trust boundary

Answer

Trust boundaries mark where data crosses between zones of differing privilege, which is where threats concentrate.

Question 2

Which STRIDE category is primarily mitigated by implementing strong authentication?

Accepted Answer

Spoofing

Answer

Spoofing is pretending to be someone or something else, so authentication is its primary countermeasure.

Question 3

A web app lets users deny they submitted a funds transfer because no tamper-proof audit trail exists. Which STRIDE threat is this?

Accepted Answer

Repudiation

Answer

Repudiation occurs when users can deny actions due to missing non-repudiation controls like secure logging or digital signatures.

Question 4

In the STRIDE-per-element approach, which threats generally apply to a data store element?

Accepted Answer

Tampering, Information Disclosure, Denial of Service, and Repudiation (if logs)

Answer

Data stores are subject to T, I, and D, plus R when the store holds audit logs.

Question 5

When should threat modeling ideally be performed in the secure SDLC?

Accepted Answer

During the design phase and revisited as the design changes

Answer

Threat modeling is most cost-effective in design and should be updated as architecture evolves.

(CASE) Certified Application Security Engineer Practice Test