Eccouncil 312-96 Exam - Topic 6 Question 37 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 37
Topic #: 6

Which of the risk assessment model is used to rate the threats-based risk to the application during threat modeling process?

ADREAD

BSMART

CSTRIDE

DRED

Show Suggested Answer

Suggested Answer: C

by Refugia at Mar 09, 2025, 07:16 PM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesusa

4 months ago

I’m surprised DREAD is still the top choice!

upvoted 0 times

...

Jeannetta

5 months ago

RED is not really used for that, right?

upvoted 0 times

...

Clarence

5 months ago

Wait, isn't STRIDE more common for threat modeling?

upvoted 0 times

...

Francoise

5 months ago

Totally agree, DREAD is the go-to!

upvoted 0 times

...

Regenia

5 months ago

I think it's definitely DREAD.

upvoted 0 times

...

Val

6 months ago

I feel like RED might be related, but I don't remember it being a primary model for threats.

upvoted 0 times

...

Dominga

6 months ago

I practiced a question similar to this, and I think DREAD was the right answer.

upvoted 0 times

...

Tom

6 months ago

I remember STRIDE being mentioned a lot in our classes, but I can't recall if it's specifically for threat assessment.

upvoted 0 times

...

Adelaide

6 months ago

I think DREAD is the one used for threat modeling, but I'm not entirely sure.

upvoted 0 times

...

Thurman

6 months ago

The DREAD model is the way to go here. It's specifically designed to assess the risk of threats during the threat modeling process.

upvoted 0 times

...

Bulah

6 months ago

I'm a bit confused on the difference between the DREAD and STRIDE models. I'll have to review my notes to make sure I understand which one is used for risk assessment.

upvoted 0 times

...

Vernell

6 months ago

Okay, let me think this through. DREAD stands for Damage, Reproducibility, Exploitability, Affected users, and Discoverability, so that seems like the right model to rate the threats.

upvoted 0 times

...

Carey

6 months ago

Hmm, I'm a bit unsure about this one. I know STRIDE is used for threat identification, but I can't remember which model is used for risk assessment.

upvoted 0 times

...

Mose

6 months ago

I'm pretty sure the answer is DREAD, that's the risk assessment model used for threat modeling.

upvoted 0 times

...

Leota

11 months ago

DREAD - it's like the perfect storm of threat assessment. Not too little, not too much, just right!

upvoted 0 times

...

Zena

11 months ago

SMART? Are we evaluating the application's IQ or its security threats? I'll stick with the classic DREAD.

upvoted 0 times

Paulina

9 months ago

SMART might be confusing, let's stick with DREAD.

upvoted 0 times

...

Rolland

10 months ago

I think DREAD covers all the important aspects of threat assessment.

upvoted 0 times

...

Vilma

10 months ago

I agree, DREAD is a widely used risk assessment model.

upvoted 0 times

...

Esteban

10 months ago

DREAD is a classic choice for threat modeling.

upvoted 0 times

...

Yoko

11 months ago

RED? What is this, a traffic light? I'll go with C on this one.

upvoted 0 times

Maybelle

10 months ago

I'll go with A) DREAD as well.

upvoted 0 times

...

Ivette

10 months ago

I'm going with C) STRIDE.

upvoted 0 times

...

Beata

10 months ago

I think the answer is A) DREAD.

upvoted 0 times

...

Alpha

11 months ago

Hmm, STRIDE sounds like the right answer here. Gotta love those Microsoft threat models.

upvoted 0 times

Nikita

10 months ago

Yeah, Microsoft's threat modeling process is quite comprehensive with the use of models like STRIDE.

upvoted 0 times

...

Amie

10 months ago

DREAD is also a commonly used risk assessment model in threat modeling.

upvoted 0 times

...

Geraldine

11 months ago

I agree, STRIDE is the correct answer for rating threats during threat modeling.

upvoted 0 times

...

Lai

12 months ago

DREAD, of course! I remember learning about that in my security class.

upvoted 0 times

Soledad

10 months ago

Yes, DREAD is the correct risk assessment model for rating threats-based risk during threat modeling.

upvoted 0 times

...

Thaddeus

10 months ago

A) DREAD

upvoted 0 times

...

Domitila

10 months ago

Actually, it's DREAD that is used for this purpose.

upvoted 0 times

...

Charisse

10 months ago

C) STRIDE

upvoted 0 times

...

Karan

11 months ago

That's right! DREAD is commonly used for rating threats-based risk in threat modeling.

upvoted 0 times

...

Louis

11 months ago

A) DREAD

upvoted 0 times

...

Val

1 year ago

I'm not sure, but I think C) STRIDE is also used for risk assessment in some cases.

upvoted 0 times

...

Rikki

1 year ago

I agree with Gwen, DREAD is commonly used for threat modeling.

upvoted 0 times

...

Gwen

1 year ago

I think the answer is A) DREAD.

upvoted 0 times

...