Skip to content
AI Security

Interview question · Security Foundations & Threat Modeling

How do attack trees and kill chains help in threat modelling, and where do they mislead?

Two classic tools that structure attacker thinking. The scored answer uses each for what it is good at and names the blind spots before an interviewer does.

mediumNewPreparation tags: Microsoft, Google, AmazonUpdated Nov 2026

Two classic tools that structure attacker thinking. The scored answer uses each for what it is good at and names the blind spots before an interviewer does.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

10 answers per topic instead of 5, plus saved progress and bookmarks · costs nothingor unlock all 529 remaining answers · $25

Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.

6 months · One payment · No auto-renewal

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

You are asked to analyse how an attacker could steal model weights from a training environment, and to recommend where to invest.

  1. What is an attack tree?
  2. What would the top branches be here?
  3. What is a kill chain?
  4. How do the two combine?
  5. Which controls cut many paths?
  6. What would your analysis recommend?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Premium opens every answer and ladder.

UP NEXT ON YOUR JOURNEY
Next in this trackWhy does STRIDE need adapting for ML components, and how would you adapt it?Next in this trackWhat would you log for a new service, and how do you write a detection with an acceptable false-positive rate?Next in this trackApply data minimisation and purpose limitation to a feature that sends user data to a model provider.
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.