Practice Threat Modeling (4) - Secure Software Development

Practise this section

9 questions

Flashcard drill
2 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
3 questions · about 2 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does STRIDE stand for?
Show hintHide hint
Think of all the different types of threats.
Question 2.
What is the purpose of threat modeling?
Show hintHide hint
It's about proactive security.
3Question 3.
What does STRIDE help identify?
- Security Design Flaws
- User Interface Issues
- Code Quality Problems
Show hintHide hint
Remember the categories of threats.
4Question 4.
DREAD assists in prioritizing which of the following?
- User Stories
- Security Threats
- Code Quality
Show hintHide hint
Consider which framework deals with evaluation.
Question 5.
Create a detailed threat model for an e-commerce platform considering at least three STRIDE categories.
Show hintHide hint
Focus on categories from STRIDE for comprehensive analysis.
Question 6.
Using DREAD, assess a hypothetical scenario of your choice where a denial of service attack is feasible. Calculate the score for the threat.
Show hintHide hint
Break down each component of the DREAD framework.

5 more questions in this section. Enroll free to practise them all.