Eccouncil 312-96 Exam - Topic 6 Question 37 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 37
Topic #: 6

Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

ADREAD

BSMART

CSTRIDE

DRED

Show Suggested Answer

Suggested Answer: C

by Refugia at Mar 09, 2025, 07:16 PM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesusa

8 months ago

I’m surprised DREAD is still the top choice!

upvoted 0 times

...

Jeannetta

8 months ago

RED is not really used for that, right?

upvoted 0 times

...

Clarence

8 months ago

Wait, isn't STRIDE more common for threat modeling?

upvoted 0 times

...

Francoise

8 months ago

Totally agree, DREAD is the go-to!

upvoted 0 times

...

Regenia

8 months ago

I think it's definitely DREAD.

upvoted 0 times

...

Val

9 months ago

I feel like RED might be related, but I don't remember it being a primary model for threats.

upvoted 0 times

...

Dominga

9 months ago

I practiced a question similar to this, and I think DREAD was the right answer.

upvoted 0 times

...

Tom

9 months ago

I remember STRIDE being mentioned a lot in our classes, but I can't recall if it's specifically for threat assessment.

upvoted 0 times

...

Adelaide

9 months ago

I think DREAD is the one used for threat modeling, but I'm not entirely sure.

upvoted 0 times

...

Thurman

9 months ago

The DREAD model is the way to go here. It's specifically designed to assess the risk of threats during the threat modeling process.

upvoted 0 times

...

Bulah

9 months ago

I'm a bit confused on the difference between the DREAD and STRIDE models. I'll have to review my notes to make sure I understand which one is used for risk assessment.

upvoted 0 times

...

Vernell

9 months ago

Okay, let me think this through. DREAD stands for Damage, Reproducibility, Exploitability, Affected users, and Discoverability, so that seems like the right model to rate the threats.

upvoted 0 times

...

Carey

9 months ago

Hmm, I'm a bit unsure about this one. I know STRIDE is used for threat identification, but I can't remember which model is used for risk assessment.

upvoted 0 times

...

Mose

9 months ago

I'm pretty sure the answer is DREAD, that's the risk assessment model used for threat modeling.

upvoted 0 times

...

Leota

1 year ago

DREAD - it's like the perfect storm of threat assessment. Not too little, not too much, just right!

upvoted 0 times

...

Zena

1 year ago

SMART? Are we evaluating the application's IQ or its security threats? I'll stick with the classic DREAD.

upvoted 0 times

Paulina

1 year ago

SMART might be confusing, let's stick with DREAD.

upvoted 0 times

...

Rolland

1 year ago

I think DREAD covers all the important aspects of threat assessment.

upvoted 0 times

...

Vilma

1 year ago

I agree, DREAD is a widely used risk assessment model.

upvoted 0 times

...

Esteban

1 year ago

DREAD is a classic choice for threat modeling.

upvoted 0 times

...

Yoko

1 year ago

RED? What is this, a traffic light? I'll go with C on this one.

upvoted 0 times

Maybelle

1 year ago

I'll go with A) DREAD as well.

upvoted 0 times

...

Ivette

1 year ago

I'm going with C) STRIDE.

upvoted 0 times

...

Beata

1 year ago

I think the answer is A) DREAD.

upvoted 0 times

...

Alpha

1 year ago

Hmm, STRIDE sounds like the right answer here. Gotta love those Microsoft threat models.

upvoted 0 times

Nikita

1 year ago

Yeah, Microsoft's threat modeling process is quite comprehensive with the use of models like STRIDE.

upvoted 0 times

...

Amie

1 year ago

DREAD is also a commonly used risk assessment model in threat modeling.

upvoted 0 times

...

Geraldine

1 year ago

I agree, STRIDE is the correct answer for rating threats during threat modeling.

upvoted 0 times

...

Lai

1 year ago

DREAD, of course! I remember learning about that in my security class.

upvoted 0 times

Soledad

1 year ago

Yes, DREAD is the correct risk assessment model for rating threats-based risk during threat modeling.

upvoted 0 times

...

Thaddeus

1 year ago

A) DREAD

upvoted 0 times

...

Domitila

1 year ago

Actually, it's DREAD that is used for this purpose.

upvoted 0 times

...

Charisse

1 year ago

C) STRIDE

upvoted 0 times

...

Karan

1 year ago

That's right! DREAD is commonly used for rating threats-based risk in threat modeling.

upvoted 0 times

...

Louis

1 year ago

A) DREAD

upvoted 0 times

...

Val

1 year ago

I'm not sure, but I think C) STRIDE is also used for risk assessment in some cases.

upvoted 0 times

...

Rikki

1 year ago

I agree with Gwen, DREAD is commonly used for threat modeling.

upvoted 0 times

...

Gwen

1 year ago

I think the answer is A) DREAD.

upvoted 0 times

...