Practice What Is Threat Modeling? (4.1) - Secure Software Development - Cyber Security Advance

Practice: What is Threat Modeling?

Lesson 4.1Secure Software Development

Practise this section

10 questions

Flashcard drill
4 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
4 questions · about 3 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
Define threat modeling in your own words.
Show hintHide hint
Think about what it means to assess possible security risks.
Question 2.
What does STRIDE stand for?
Show hintHide hint
Remember that it's a framework for different kinds of threats.
3Question 3.
What is the main purpose of threat modeling?
- To design software more quickly.
- To identify and assess potential threats.
- To eliminate all bugs from the software.
Show hintHide hint
Think about the focus of security initiatives.
4Question 4.
STRIDE is a framework used for threat categorization.
- True
- False
Show hintHide hint
Recall what STRIDE represents.
Question 5.
Suppose you are developing a new messaging app. Identify at least three threats and utilize STRIDE to categorize them.
Show hintHide hint
Think about the features of your app and potential vulnerabilities related to them.
Question 6.
Design a simple threat model for a shopping cart feature in e-commerce. Use both STRIDE and DREAD frameworks.
Show hintHide hint
Break the functionality down into steps and consider what could go wrong at each point.

6 more questions in this section. Enroll free to practise them all.