Eccouncil 312-96 Exam - Topic 6 Question 37 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 37
Topic #: 6

Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

ADREAD

BSMART

CSTRIDE

DRED

Show Suggested Answer

Suggested Answer: C

by Refugia at Mar 09, 2025, 07:16 PM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesusa

9 months ago

I’m surprised DREAD is still the top choice!

upvoted 0 times

...

Jeannetta

9 months ago

RED is not really used for that, right?

upvoted 0 times

...

Clarence

10 months ago

Wait, isn't STRIDE more common for threat modeling?

upvoted 0 times

...

Francoise

10 months ago

Totally agree, DREAD is the go-to!

upvoted 0 times

...

Regenia

10 months ago

I think it's definitely DREAD.

upvoted 0 times

...

Val

10 months ago

I feel like RED might be related, but I don't remember it being a primary model for threats.

upvoted 0 times

...

Dominga

11 months ago

I practiced a question similar to this, and I think DREAD was the right answer.

upvoted 0 times

...

Tom

11 months ago

I remember STRIDE being mentioned a lot in our classes, but I can't recall if it's specifically for threat assessment.

upvoted 0 times

...

Adelaide

11 months ago

I think DREAD is the one used for threat modeling, but I'm not entirely sure.

upvoted 0 times

...

Thurman

11 months ago

The DREAD model is the way to go here. It's specifically designed to assess the risk of threats during the threat modeling process.

upvoted 0 times

...

Bulah

11 months ago

I'm a bit confused on the difference between the DREAD and STRIDE models. I'll have to review my notes to make sure I understand which one is used for risk assessment.

upvoted 0 times

...

Vernell

11 months ago

Okay, let me think this through. DREAD stands for Damage, Reproducibility, Exploitability, Affected users, and Discoverability, so that seems like the right model to rate the threats.

upvoted 0 times

...

Carey

11 months ago

Hmm, I'm a bit unsure about this one. I know STRIDE is used for threat identification, but I can't remember which model is used for risk assessment.

upvoted 0 times

...

Mose

11 months ago

I'm pretty sure the answer is DREAD, that's the risk assessment model used for threat modeling.

upvoted 0 times

...

Leota

1 year ago

DREAD - it's like the perfect storm of threat assessment. Not too little, not too much, just right!

upvoted 0 times

...

Zena

1 year ago

SMART? Are we evaluating the application's IQ or its security threats? I'll stick with the classic DREAD.

upvoted 0 times

Paulina

1 year ago

SMART might be confusing, let's stick with DREAD.

upvoted 0 times

...

Rolland

1 year ago

I think DREAD covers all the important aspects of threat assessment.

upvoted 0 times

...

Vilma

1 year ago

I agree, DREAD is a widely used risk assessment model.

upvoted 0 times

...

Esteban

1 year ago

DREAD is a classic choice for threat modeling.

upvoted 0 times

...

Yoko

1 year ago

RED? What is this, a traffic light? I'll go with C on this one.

upvoted 0 times

Maybelle

1 year ago

I'll go with A) DREAD as well.

upvoted 0 times

...

Ivette

1 year ago

I'm going with C) STRIDE.

upvoted 0 times

...

Beata

1 year ago

I think the answer is A) DREAD.

upvoted 0 times

...

Alpha

1 year ago

Hmm, STRIDE sounds like the right answer here. Gotta love those Microsoft threat models.

upvoted 0 times

Nikita

1 year ago

Yeah, Microsoft's threat modeling process is quite comprehensive with the use of models like STRIDE.

upvoted 0 times

...

Amie

1 year ago

DREAD is also a commonly used risk assessment model in threat modeling.

upvoted 0 times

...

Geraldine

1 year ago

I agree, STRIDE is the correct answer for rating threats during threat modeling.

upvoted 0 times

...

Lai

1 year ago

DREAD, of course! I remember learning about that in my security class.

upvoted 0 times

Soledad

1 year ago

Yes, DREAD is the correct risk assessment model for rating threats-based risk during threat modeling.

upvoted 0 times

...

Thaddeus

1 year ago

A) DREAD

upvoted 0 times

...

Domitila

1 year ago

Actually, it's DREAD that is used for this purpose.

upvoted 0 times

...

Charisse

1 year ago

C) STRIDE

upvoted 0 times

...

Karan

1 year ago

That's right! DREAD is commonly used for rating threats-based risk in threat modeling.

upvoted 0 times

...

Louis

1 year ago

A) DREAD

upvoted 0 times

...

Val

1 year ago

I'm not sure, but I think C) STRIDE is also used for risk assessment in some cases.

upvoted 0 times

...

Rikki

1 year ago

I agree with Gwen, DREAD is commonly used for threat modeling.

upvoted 0 times

...

Gwen

1 year ago

I think the answer is A) DREAD.

upvoted 0 times

...