stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Session 6 - Threat, Risk & Threat Modelling Flashcards | StudBud
Explore
/
Session 6 - Threat, Risk & Threat Modelling
Session 6 - Threat, Risk & Threat Modelling
14 terms
·
StudBud Administration
·
35 plays
Imported from external platform
Flashcards
14 cards
F
Practice quiz
P
Host live
L
Questions
14
Answers
1
Which is a correct risk treatment method?
Diversify
Ignore
Validate
Mitigate
2
Which type of threat actor aims to draw attention to causes or ideologies?
Organized Crime
APT
Insider Threats
Hacktivists
3
What is STRIDE used for?
Data storage
Encrypting communications
Protocol analysis
Threat modeling
4
What does SL 3 in IEC 62443 provide protection against?
Coincidental failures
Natural disasters
Sophisticated intentional attacks
Unauthorized maintenance
5
Which OT risk management standard is simple and practical?
ISO 31000
COBIT 5
NIST 800-171
VDI/VDE 2182-1
6
What is the purpose of threat and risk assessment in OT security?
Reduce energy usage
Identify, Assess and mitigate cybersecurity risks
To establish all is well
Improve factory design
7
What is an asset in threat modeling according to IEC 62443-3-3?
Physical building only
Only hardware components
An insurance document
Anything with perceived or actual value
8
What is the first step in threat modeling?
Run test scripts
Define/Model the System
Deploy firewall
Configure alerts
9
Which is not a typical component of a STRIDE analysis?
Redundancy
Spoofing
Tampering
Information Disclosure
10
Which model focuses on attacker motivation and skills?
Attacker-centric
Hardware mapping
Asset-centric
Compliance-based
11
What is the purpose of threat modeling?
Track financial loss
Identify vulnerabilities early
Generate audit reports
Eliminate software bugs
12
What is the correct order of risk management steps in ISO 31000?
Define, Schedule, Integrate
Identify, Analyze, Evaluate, Treat
Assess, Build, Repair, Maintain
Monitor, Evaluate, Communicate
13
Which threat catalog is maintained by MITRE?
TISA
GDPR
CISA
CAPEC
14
Which of the following is a common OT threat actor?
Advertising firms
Script Kiddies
Cloud providers
E-commerce bots
