MENU
Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?
Suggested Answer: C
Get Premium 312-96 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
JE
Jesusa
11 months ago
I’m surprised DREAD is still the top choice!
JE
Jeannetta
11 months ago
RED is not really used for that, right?
CL
Clarence
11 months ago
Wait, isn't STRIDE more common for threat modeling?
FR
Francoise
12 months ago
Totally agree, DREAD is the go-to!
RE
Regenia
12 months ago
I think it's definitely DREAD.
VA
Val
1 year ago
I feel like RED might be related, but I don't remember it being a primary model for threats.
DO
Dominga
1 year ago
I practiced a question similar to this, and I think DREAD was the right answer.
TO
Tom
1 year ago
I remember STRIDE being mentioned a lot in our classes, but I can't recall if it's specifically for threat assessment.
AD
Adelaide
1 year ago
I think DREAD is the one used for threat modeling, but I'm not entirely sure.
TH
Thurman
1 year ago
The DREAD model is the way to go here. It's specifically designed to assess the risk of threats during the threat modeling process.
BU
Bulah
1 year ago
I'm a bit confused on the difference between the DREAD and STRIDE models. I'll have to review my notes to make sure I understand which one is used for risk assessment.
VE
Vernell
1 year ago
Okay, let me think this through. DREAD stands for Damage, Reproducibility, Exploitability, Affected users, and Discoverability, so that seems like the right model to rate the threats.
CA
Carey
1 year ago
Hmm, I'm a bit unsure about this one. I know STRIDE is used for threat identification, but I can't remember which model is used for risk assessment.
MO
Mose
1 year ago
I'm pretty sure the answer is DREAD, that's the risk assessment model used for threat modeling.
LE
Leota
1 year ago
DREAD - it's like the perfect storm of threat assessment. Not too little, not too much, just right!
ZE
Zena
1 year ago
SMART? Are we evaluating the application's IQ or its security threats? I'll stick with the classic DREAD.
PA
Paulina
1 year ago
SMART might be confusing, let's stick with DREAD.
RO
Rolland
1 year ago
I think DREAD covers all the important aspects of threat assessment.
VI
Vilma
1 year ago
I agree, DREAD is a widely used risk assessment model.
ES
Esteban
1 year ago
DREAD is a classic choice for threat modeling.
YO
Yoko
1 year ago
RED? What is this, a traffic light? I'll go with C on this one.
MA
Maybelle
1 year ago
I'll go with A) DREAD as well.
IV
Ivette
1 year ago
I'm going with C) STRIDE.
BE
Beata
1 year ago
I think the answer is A) DREAD.
AL
Alpha
1 year ago
Hmm, STRIDE sounds like the right answer here. Gotta love those Microsoft threat models.
NI
Nikita
1 year ago
Yeah, Microsoft's threat modeling process is quite comprehensive with the use of models like STRIDE.
AM
Amie
1 year ago
DREAD is also a commonly used risk assessment model in threat modeling.
GE
Geraldine
1 year ago
I agree, STRIDE is the correct answer for rating threats during threat modeling.
LA
Lai
2 years ago
DREAD, of course! I remember learning about that in my security class.
SO
Soledad
1 year ago
Yes, DREAD is the correct risk assessment model for rating threats-based risk during threat modeling.
TH
Thaddeus
1 year ago
A) DREAD
DO
Domitila
1 year ago
Actually, it's DREAD that is used for this purpose.
CH
Charisse
1 year ago
C) STRIDE
KA
Karan
1 year ago
That's right! DREAD is commonly used for rating threats-based risk in threat modeling.
LO
Louis
1 year ago
A) DREAD
VA
Val
2 years ago
I'm not sure, but I think C) STRIDE is also used for risk assessment in some cases.
RI
Rikki
2 years ago
I agree with Gwen, DREAD is commonly used for threat modeling.
GW
Gwen
2 years ago
I think the answer is A) DREAD.