350-201 Question 169
Select 3A security analyst is tasked with assessing the potential threats to a newly deployed web application. As part of the threat modeling process, the analyst identifies sensitive user data stored in a database and the external API endpoints used by the application. Which components should the analyst prioritize analyzing to comprehensively address potential threats?
- A
Assets such as sensitive user data and database systems
- B
Attack vectors that could exploit API vulnerabilities
- C
External APIs' uptime and reliability metrics
- D
Potential threat actors targeting the web application
- E
Incident response processes already in place
Show answer and explanation
Correct answers: A, B, D
Explanation
A comprehensive threat model should focus on identifying and analyzing critical assets, attack vectors, and potential threat actors. These components help the analyst understand the risks and vulnerabilities associated with a system. Other considerations, such as uptime metrics and incident response processes, are important but do not directly contribute to the identification of threats during the modeling phase.
- A. Correct.
Assets, such as sensitive user data and database systems, are critical components of a threat model as they represent what the attacker aims to compromise.
- B. Correct.
Attack vectors, such as vulnerabilities in APIs, are essential to analyze because they represent potential entry points for attackers.
- C. Incorrect.
While uptime and reliability metrics are important for overall system performance, they are not directly related to identifying threats in a threat model.
- D. Correct.
Threat actors are a key component in a threat model because understanding who might target the application helps define the potential risks.
- E. Incorrect.
Incident response processes are part of mitigating threats after they occur, but they are not directly involved in identifying components of a threat model.