CDP Threat Modeling & Vulnerability Management 1 — Questions and Answers
Question 1: What is the primary purpose of threat modeling in a DevSecOps pipeline?
- To identify potential security threats and vulnerabilities early in the development process (Correct answer)
- To automatically patch all discovered vulnerabilities in production systems
- To replace penetration testing in the software development lifecycle
- To generate compliance reports for regulatory audits
Correct answer: To identify potential security threats and vulnerabilities early in the development process
Threat modeling proactively identifies potential threats and vulnerabilities during design, enabling teams to address them before code is written or deployed.
Question 2: Which threat modeling framework categorizes threats using the STRIDE mnemonic?
- PASTA (Process for Attack Simulation and Threat Analysis)
- VAST (Visual, Agile, and Simple Threat modeling)
- Microsoft STRIDE (Correct answer)
- OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation)
Correct answer: Microsoft STRIDE
STRIDE was developed by Microsoft and categorizes threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
Question 3: In the STRIDE threat model, what does the letter 'T' represent?
- Traceability
- Tampering (Correct answer)
- Transparency
- Tracking
Correct answer: Tampering
In STRIDE, 'T' stands for Tampering, which refers to unauthorized modification of data in transit or at rest.
Question 4: What does the DREAD risk assessment model use to calculate risk scores?
- Damage Potential, Reproducibility, Exploitability, Affected Users, Discoverability (Correct answer)
- Detection, Response, Evasion, Assessment, Defense
- Data Loss, Risk Level, Exposure Window, Audit Trail, Defense Cost
- Damage Scope, Remediation Time, Ease of Exploit, Asset Value, Detection Rate
Correct answer: Damage Potential, Reproducibility, Exploitability, Affected Users, Discoverability
DREAD scores risks across Damage Potential, Reproducibility, Exploitability, Affected Users, and Discoverability to produce a quantified threat severity rating.
Question 5: Which threat modeling approach uses hierarchical tree structures to visually represent how an attacker might achieve a malicious goal?
- STRIDE methodology
- PASTA methodology
- Attack Tree Analysis (Correct answer)
- LINDDUN methodology
Correct answer: Attack Tree Analysis
Attack Tree Analysis models threats as a tree where the root node represents an attacker's goal and branches represent different paths to achieve that goal.
Question 6: What is the primary output of the PASTA (Process for Attack Simulation and Threat Analysis) threat modeling methodology?
- A list of security controls to implement in the codebase
- A prioritized list of threats aligned with business impact and risk (Correct answer)
- An automated vulnerability scan report of the production environment
- A penetration testing roadmap for the security team
Correct answer: A prioritized list of threats aligned with business impact and risk
PASTA is a risk-centric, seven-stage methodology that produces a threat analysis aligned with business objectives and the organization's risk appetite.
Question 7: In threat modeling data flow diagrams, what is a 'trust boundary'?
- A firewall rule separating internal and external network segments
- A point where data passes between components with different security trust levels (Correct answer)
- An SSL/TLS certificate validation checkpoint in an API gateway
- A user authentication requirement enforced at the application layer
Correct answer: A point where data passes between components with different security trust levels
Trust boundaries are points in a system where data flows between components or processes that operate at different levels of trust, making them critical areas for threat analysis.
CDP Threat Modeling & Vulnerability Management 1
What is the primary purpose of threat modeling in a DevSecOps pipeline?