Self-assessment questions

1. What is a threat model?
   1. A type of malware
   2. A cybersecurity certification
   3. A systematic approach to identifying and evaluating potential security threats
   4. A hardware security device
2. What does the first “D” mean in the DREAD threat modeling framework?
   1. Data encryption
   2. Damage potential
   3. Design
   4. Detection
3. What does the “T” in STRIDE stand for in the context of threat modeling?
   1. Time
   2. Tampering
   3. Trespassing
   4. Trust
4. In the STRIDE threat model, what does the “R” represent?
   1. Reliability
   2. Remote execution
   3. Repudiation
   4. Reusability
5. Suppose you are analyzing a potential security breach using an attack tree. In the attack tree, you have identified two possible attack paths to compromise a sensitive database:

   Path 1:

   The attacker gains physical access to the server room.

   The attacker compromises the server hardware.

   The attacker accesses the sensitive database.

   Path 2:

   The attacker exploits a known software vulnerability on the...