SDL Threat Modeling & Risk Assessment 4

Question 1

Which SDL phase is the FIRST recommended time to perform threat modeling?

Accepted Answer

Design

Answer

SDL recommends performing threat modeling during the Design phase so that architectural flaws can be corrected before code is written.

Question 2

When using TRIKE for threat modeling, the method differs from STRIDE primarily because TRIKE:

Accepted Answer

Derives threats systematically from a requirements model and risk acceptability rules

Answer

TRIKE generates a complete threat model by systematically applying rules to a requirements model, ensuring every actor-action-asset combination is evaluated.

Question 3

A cloud-hosted microservice exposes an internal metrics endpoint without authentication on port 9090. What is the most appropriate first action when this is found during threat modeling?

Accepted Answer

Add it to the attack surface inventory and assign an owner to remediate

Answer

The correct SDL response is to formally add unauthenticated endpoints to the attack surface inventory, assign ownership, and drive remediation through the security process.

Question 4

In risk assessment, 'likelihood' combined with 'impact' produces what output?

Accepted Answer

Risk level

Answer

Risk = Likelihood × Impact; combining these two dimensions yields a risk level that prioritizes which threats require the most urgent mitigation.

Question 5

Which of the following best describes a 'trust boundary' in a threat model?

Accepted Answer

The line separating components with different levels of trust or privilege

Answer

A trust boundary marks where data or control passes between components operating under different privilege or trust levels, making it a prime location for threats.

(SDL) Security Development Lifecycle Certification Practice Test

(SDL) Security Development Lifecycle Certification Practice Test

SDL Threat Modeling & Risk Assessment 4