Which of the following best describes the purpose of evaluating a threat model?

To determine if it effectively identifies and mitigates risks

Which of the following best describes ransomware in cybersecurity?

Malware lock the files, demands payment in exchange for a decryption key

Why is threat modelling an important part of a secure software development process?

It helps identify, understand and mitigate potential security threats early

What does Threat Status mean in Cybersecurity?

The level of danger associated with a security breach.

What is the best source to determine emerging threats specific to your industry?

Government threat reports (e.g., NCSC)

What is phishing in cybersecurity?

Fake emails or messages to trick users to give away sensitive information

Which of the following is the first step in evaluating a threat model in cybersecurity?

Identifying potential attackers

What is a Threat Model in cybersecurity?

A process that identifies potential attacks and their likelihood.

What are the seven stages of PASTA in cybersecurity?

Vulnerability Analysis, Decompose the Application, Analyse the Threats

What do the letters of STRIDE stand for in cybersecurity?

Spoofing, Tampering, Repudiation, Info Disclosure, D/DoS, Elevation

Which of the following would be a relevant intelligence requirement for a financial services company?

Threats to cloud-based banking platforms

Why is it important to tailor threat intelligence to an organisation's needs?

It reduces unnecessary data and improves actionability

Which of the following best describes a DDoS attack in cybersecurity?

Systems are used to flood a targeted server or network with traffic

What is the purpose of reviewing the current threat landscape?

To make informed security decisions based on active threat

Which of the following would be a valid recommendation if phishing attacks are increasing in an organisation?

Train staff in identifying phishing emails

What is the first step when defining cyber threat intelligence requirements?

Understanding the organisation’s assets and objectives

What is usually the first step in the threat modelling process?

Understand the system or application

studbud

Cybersecurity Threat Models and threat status

20 termsStudBud Administration10 plays

NCFE Unit 2 - Q 1.8 - Q 2.3

Flashcards20 cardsFPractice quizPHost liveL

Questions 20

Answers

1
Which of the following best describes the purpose of evaluating a threat model?
To impress clients with technical detail
To determine if it effectively identifies and mitigates risks
To avoid using antivirus software
To decide if passwords should be longer
2
Which of the following best describes ransomware in cybersecurity?
A type of virus that infects a computer and collects personal information
Malware lock the files, demands payment in exchange for a decryption key
Social engineering attack to trick user to enter their login credentials
A type of attack that involves brute force password guessing
3
Which of the following is a physical threat model method?
Kill Chain
Attack Tree
PASTA
DREAD
4
Why is threat modelling an important part of a secure software development process?
It helps design flashy user interfaces
It eliminates the need for penetration testing
It helps identify, understand and mitigate potential security threats early
It ensures systems meet aesthetic design goals
5
What does Threat Status mean in Cybersecurity?
The number of security measures in place to prevent attacks.
The level of training provided to employees regarding security.
How likely it is for attackers to exploit a weakness in a system.
The level of danger associated with a security breach.
6
What is the best source to determine emerging threats specific to your industry?
Personal opinions from friends
Antivirus ads
Movie reviews
Government threat reports (e.g., NCSC)
7
What is phishing in cybersecurity?
Fake emails or messages to trick users to give away sensitive information
The act of hacking into a system by guessing or cracking a password
Using software to bypass firewalls and access sensitive information
The act of stealing physical documents from a secure location
8
Which of the following is the first step in evaluating a threat model in cybersecurity?
Developing countermeasures
None of the above
Determining the value of the assets to be protected
Identifying potential attackers
9
Which threat model is commonly used to identify possible attacks on system assets and ranks them by risk?
PASATA
SSCV
STRIDE
MMhT
10
Which step involves ranking threats based on impact and likelihood?
Identify actors
Assess and prioritise threats
Define the business
Encrypt all files
11
What is a Threat Model in cybersecurity?
A tool that helps detect vulnerabilities in software.
A method for authenticating users before granting access to a system.
A technique for encrypting data to protect it from unauthorised access.
A process that identifies potential attacks and their likelihood.
12
What are the seven stages of PASTA in cybersecurity?
Vulnerability Analysis
Define the Technical Scope
Decompose the Application
Analyse the Threats
Attack Analysis
Exploitation
13
What do the letters of STRIDE stand for in cybersecurity?
Security, Threat, Response, Incident, Detection, Encryption
System, Threat, Risk, Integrity, Detection, Encryption
Suspicious activity, Trojan, Rootkit, Intrusion, Detection, Encryption
Spoofing, Tampering, Repudiation, Info Disclosure, D/DoS, Elevation
14
Which of the following would be a relevant intelligence requirement for a financial services company?
Cryptocurrency design structure
Threats to cloud-based banking platforms
Social media engagement rates
Retail marketing trends
15
Why is it important to tailor threat intelligence to an organisation's needs?
It reduces unnecessary data and improves actionability
It looks better on reports
It saves time during software installation
It helps the HR department hire faster
16
Which of the following best describes a DDoS attack in cybersecurity?
Systems are used to flood a targeted server or network with traffic
Social engineering attack that tricks victims for sensitive information.
Malware that encrypts a victim's data and demands payment for its release.
A method of stealing login credentials by impersonating a trusted entity.
17
What is the purpose of reviewing the current threat landscape?
To make informed security decisions based on active threat
To reduce software updates
To track company profits
To recommend security tools without data
18
Which of the following would be a valid recommendation if phishing attacks are increasing in an organisation?
Allow public Wi-Fi access to staff devices
Share passwords via secure notes
Delay email system upgrades
Train staff in identifying phishing emails
19
What is the first step when defining cyber threat intelligence requirements?
Changing firewall settings
Analysing malware code
Understanding the organisation’s assets and objectives
Writing a news article
20
What is usually the first step in the threat modelling process?
Create network diagrams
Understand the system or application
Identify possible attackers
Hire a red team

Cybersecurity Threat Models and threat status Flashcards | StudBud