Study. uk . com
  1. Home
  2. All questions
  3. Question 206

CompTIA Security+ study material · question 206 of 611

Which four questions structure a threat modelling exercise?

  1. Who attacks us, when, with what, and for how much
  2. What are we building, what can go wrong, what will we do about it, and did we do a good enough job
  3. What is the asset, what is its value, what is the threat, and what is the control
  4. Identify, protect, detect and respond
Show the answer

Answer: B. What are we building, what can go wrong, what will we do about it, and did we do a good enough job

The four-question framework works from the design outward and ends by checking the model's own adequacy.

Source: OWASP Threat Modeling Cheat Sheet (OWASP) — OWASP Threat Modeling Cheat Sheet › Four Question Framework

Challenge yourself on this topic → Study as cards