Threat Modeling Quiz: Test Your Cybersecurity Knowledge

📚 Quick Study Guide

• 🛡️ Threat modeling is a process for identifying and evaluating security threats and vulnerabilities.
• 🎯 The primary goal is to proactively improve security by understanding potential attack vectors.
• 🧩 Key components include identifying assets, threats, and vulnerabilities.
• 🚶‍♀️ Common methodologies are STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege) and PASTA (Process for Attack Simulation and Threat Analysis).
• 📊 DREAD (Damage potential, Reproducibility, Exploitability, Affected users, Discoverability) is used for risk ranking.
• 💡 Threat modeling should be an iterative process, adapting to changes in the system and threat landscape.
• ✍️ Documentation is crucial for tracking threats and mitigation strategies.

🤔 Practice Quiz

1. Which of the following is the FIRST step in threat modeling?
   1. Identifying assets
   2. Analyzing risks
   3. Implementing controls
   4. Validating assumptions
2. What does STRIDE stand for in threat modeling?
   1. Spoofing, Trust, Repudiation, Information Disclosure, Denial of Service, Elevation
   2. Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege
   3. Security, Trust, Reliability, Integrity, Dependability, Elevation of Privilege
   4. Spoofing, Tampering, Reliability, Information Disclosure, Dependability, Elevation
3. Which risk ranking framework includes Damage Potential, Reproducibility, Exploitability, Affected Users, and Discoverability?
   1. CVSS
   2. DREAD
   3. OWASP
   4. NIST
4. Which of the following is a threat modeling methodology focused on attack simulation?
   1. STRIDE
   2. DREAD
   3. PASTA
   4. VAST
5. What type of threat involves an attacker gaining unauthorized access by pretending to be someone else?
   1. Tampering
   2. Spoofing
   3. Repudiation
   4. Information Disclosure
6. Which of the following is NOT a key benefit of performing threat modeling?
   1. Identifying potential security vulnerabilities
   2. Reducing development costs
   3. Prioritizing security efforts
   4. Ensuring compliance with regulations
7. In threat modeling, what does 'Repudiation' refer to?
   1. Denying that an action took place
   2. Altering data in an unauthorized manner
   3. Gaining elevated privileges
   4. Disclosing sensitive information