CBSE Blockchain Threat Modeling 2

Question 1

In STRIDE threat modeling applied to a blockchain node, which threat category specifically addresses a malicious node falsely claiming to be a trusted validator?

Accepted Answer

Spoofing

Answer

Tampering

Answer

Repudiation

Answer

Information Disclosure

Question 2

Which attack vector does a threat model for a public blockchain's mempool primarily need to address regarding transaction ordering?

Accepted Answer

Miner Extractable Value (MEV) front-running

Answer

Replay attacks

Answer

Sybil attacks

Answer

51% attacks

Question 3

A threat model identifies that an attacker can intercept peer-to-peer gossip messages between blockchain nodes. Which control BEST mitigates this threat?

Accepted Answer

Implementing TLS/noise protocol encryption for P2P communication

Answer

Increasing block confirmation requirements

Answer

Using a proof-of-work consensus

Answer

Enabling token-based access control

Question 4

In a DeFi protocol threat model, what does 'oracle manipulation' represent as an attack surface?

Accepted Answer

Feeding false external price data to influence on-chain contract logic

Answer

Compromising the RPC node API endpoint

Answer

Exploiting the block reward algorithm

Answer

Bypassing gas fee limits in smart contracts

Question 5

Which threat modeling methodology uses an attacker-centric approach by enumerating attack trees rooted at a specific adversary goal against a blockchain system?

Accepted Answer

Attack Tree Analysis

Answer

STRIDE

Answer

PASTA

Answer

LINDDUN

Question 6

During threat modeling of a permissioned blockchain, which trust boundary is MOST critical to define between the ordering service and peer nodes?

Accepted Answer

The boundary where consensus messages are validated and authenticated

Answer

The boundary between the user wallet and the UI

Answer

The block gas limit enforcement point

Answer

The database replication boundary

Question 7

A threat model rates a vulnerability with high likelihood but low impact. How should this be prioritized compared to a low-likelihood, high-impact threat?

Accepted Answer

Use risk scoring (likelihood × impact) to compare and prioritize objectively

Answer

Always prioritize the high-likelihood threat regardless of impact

Answer

Always prioritize the high-impact threat regardless of likelihood

Answer

Defer both threats since neither scores maximum on both axes