Study. uk . com
  1. Home
  2. All questions
  3. Question 208

CompTIA Security+ study material · question 208 of 611

What makes a data flow diagram useful for threat modelling?

  1. It replaces the need for a security review
  2. Marking trust boundaries on it shows where the interesting threats live
  3. It records the CVSS score of each component
  4. It shows the deployment topology
Show the answer

Answer: B. Marking trust boundaries on it shows where the interesting threats live

Threats concentrate where data crosses from one trust level to another, so the boundaries direct the analysis.

Source: OWASP Threat Modeling Cheat Sheet (OWASP) — OWASP Threat Modeling Cheat Sheet › Decompose the Application

Challenge yourself on this topic → Study as cards