Study. uk . com
  1. Home
  2. All questions
  3. Question 209

CompTIA Security+ study material · question 209 of 611

A threat model was produced two years ago and the architecture has since changed substantially. What is its current value?

  1. It should be archived as compliance evidence
  2. It documents a system that no longer exists and needs revisiting
  3. It should be replaced by a penetration test
  4. It remains valid because threats change slowly
Show the answer

Answer: B. It documents a system that no longer exists and needs revisiting

A threat model is a living artefact tied to a specific design; when the design moves, the model must follow.

Source: OWASP Threat Modeling Cheat Sheet (OWASP) — OWASP Threat Modeling Cheat Sheet › Introduction

Challenge yourself on this topic → Study as cards