Understanding STRIDE and Threat Modelling

What does the 'S' in STRIDE stand for in the context of threat modelling?

• Spoofing

• Scanning

• Scripting

• Spamming

Which of the following is a primary goal of threat modelling?

• To increase the complexity of a system

• To identify potential security issues

• To reduce system performance

• To enhance user interface design

In the STRIDE model, what does 'T' represent?

• Tampering

• Tracking

• Testing

• Tunnelling

Which threat category in STRIDE is concerned with the unauthorised exposure of data?

• Denial of Service

• Information Disclosure

• Elevation of Privilege

• Repudiation

What is the primary focus of the 'Elevation of Privilege' category in STRIDE?

• Gaining unauthorised access to resources

• Disrupting service availability

• Modifying data without permission

• Intercepting data in transit

Which of the following is a common technique used in threat modelling?

• Data Flow Diagrams

• Waterfall Model

• Agile Development

• Gantt Charts

In threat modelling, what is the purpose of using a Data Flow Diagram (DFD)?

• To illustrate the user interface design

• To map out the flow of data within a system

• To create a timeline for project completion

• To list all possible software bugs

Which of the following is NOT a step in the threat modelling process?

• Identify assets

• Identify business objectives

• Identify threats

• Mitigate threats

What does the 'R' in STRIDE stand for?

• Replication

• Repudiation

• Repetition

• Reallocation

In the context of threat modelling, what is an 'attack vector'?

• A method used to increase system speed

• A means/method by which a hacker can gain access to a system

• A tool for measuring system performance

• The stages taken to attack a system