Practice tests · 43 items

Security Foundations & Threat Modeling practice test

Assets, adversaries and trust boundaries; least privilege and defence in depth; risk; and threat modeling with data-flow diagrams and STRIDE, extended to models, prompts and tools. Plus the detection and incident response basics every later topic assumes. The pool for this topic holds 13 easy, 21 medium and 9 hard items. Each answer comes with its reasoning and a link to the question or concept page it was drawn from.

Configure a test

Topic

Difficulty

Questions

13 in this pool · about 7 min

Reveal answers

Sample items with answers

easy · sample

In threat modeling, what is a trust boundary?

The network perimeter firewall that separates the company's internal systems from the internet

✓A place where data or control passes between parties trusted to different degrees

The set of users who have been granted administrator access to a system

The encryption layer that protects data while it is stored on disk and in backups

A trust boundary is any crossing between components with different trust: browser to server, service to third party, a document into a model's context. Firewalls sit on some boundaries, but many boundaries are inside the network. Vulnerabilities cluster where something crosses a boundary unchecked.

easy · sample

Which security property does a digital signature on a software release mainly protect?

✓Integrity and authenticity of the release

Confidentiality of the release's source code

Availability of the download server

Anonymity of the people who built it

A signature lets anyone detect changes and verify which key signed the artifact. It hides nothing, so it does not provide confidentiality, and it does nothing for availability. Encryption protects confidentiality; redundancy and capacity protect availability.

After the test

Choosing from options is easier than reasoning it out in front of a panel. These pages make you reason it out: