MENU
Your company plans to follow DevSecOps best practices of the Microsoft Cloud Adoption Framework for Azure.
You need to perform threat modeling by using a top-down approach based on the Microsoft Cloud Adoption Framework for Azure.
What should you use to start the threat modeling process?
Suggested Answer: A, D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
RE
Rene
11 months ago
STRIDE? Really? I’ve heard mixed reviews about its effectiveness lately.
MA
Marquetta
11 months ago
Wait, are we really going with STRIDE? I thought DREAD was more popular now.
AL
Alyssa
12 months ago
OWASP threat modeling is great, but not sure if it's top-down enough.
RO
Rosamond
12 months ago
I think DREAD could work too, but STRIDE is more comprehensive.
FR
Frederica
1 year ago
Definitely the STRIDE model! It's a classic for threat modeling.
MI
Micheline
1 year ago
I practiced a similar question, and I think STRIDE is definitely the right choice for identifying threats systematically.
EV
Evangelina
1 year ago
OWASP threat modeling sounds familiar, but I feel like it might not align perfectly with the top-down approach we're supposed to use here.
GE
Gearldine
1 year ago
I'm not entirely sure, but I remember DREAD being more about risk assessment rather than initial threat modeling.
FA
Fausto
1 year ago
I think we might need to start with the STRIDE model since it focuses on identifying threats based on different categories.
RY
Ryann
1 year ago
I'm a little confused by the wording of this question. It's asking about a "top-down approach" for threat modeling, but the answer choices don't seem to directly address that. I'll need to think carefully about how the Microsoft Cloud Adoption Framework recommends starting the threat modeling process.
NA
Natalie
1 year ago
Okay, I've got this. The question is asking about the best way to start the threat modeling process, and since it's specifically mentioning the Microsoft Cloud Adoption Framework, I believe the answer is the STRIDE model, which is a common threat modeling approach used in that framework.
RA
Rasheeda
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions threat modeling, but it's not clear which specific approach I should use. I'll need to review the details of the Microsoft Cloud Adoption Framework to make sure I understand the right starting point.
KA
Kara
1 year ago
This question seems straightforward. The Microsoft Cloud Adoption Framework for Azure is mentioned, so I think the answer is likely related to that framework.
JO
Jolanda
1 year ago
I've used the Alert component before for validation, so I'm confident that's one of the right answers. The Messaging component is a bit more of a wild card, but I'll give it a shot.
WI
Wilda
1 year ago
Okay, let me see. Parametric estimating uses historical data and project parameters to estimate things like cost and duration. That sounds like it could be the right answer here. I'll go with that.
AU
Audria
1 year ago
I'm a little confused by all the different statin options and dosages. I'll need to carefully read through the answer choices to make sure I select the right one.
CA
Candra
1 year ago
I'm going with the STRIDE model. It's the threat modeling equivalent of a 'Skittles and Mountain Dew' combo - it just works for this kind of thing.
GL
Gladis
1 year ago
User 3: OWASP threat modeling is another good option to consider for a comprehensive approach.
HY
Hyun
1 year ago
User 2: I think the DREAD model could also be useful in this situation.
AR
Arletta
1 year ago
User 1: I agree, the STRIDE model is a great starting point for threat modeling.
MI
Milly
2 years ago
I'm just hoping the exam doesn't ask us to threat model a cloud-based app using Tamagotchi as the threat model. That would be a real head-scratcher!
TR
Tracey
1 year ago
C) OWASP threat modeling
RO
Rosita
1 year ago
B) the DREAD model
AN
Anisha
2 years ago
A) the STRIDE model
LA
Laurene
2 years ago
I prefer using the OWASP threat modeling approach, as it provides a comprehensive framework for identifying security threats.
LO
Lorriane
2 years ago
I agree with Twila, the STRIDE model is a good starting point for threat modeling.
TW
Twila
2 years ago
I think we should use the STRIDE model to start the threat modeling process.
MA
Magdalene
2 years ago
The DREAD model? Really? I thought that was old news. Let's stick to something more modern and relevant, like the STRIDE model.
HE
Herminia
1 year ago
User 2: Definitely, we should use the STRIDE model for threat modeling.
PE
Pearly
1 year ago
User 1: I agree, the DREAD model is outdated.
ME
Merilyn
1 year ago
User 2: Yeah, the DREAD model is old news. STRIDE is the way to go.
CA
Carmen
1 year ago
User 1: I agree, the STRIDE model is more modern and relevant.
ON
Oneida
2 years ago
I personally prefer the OWASP threat modeling approach, as it provides a comprehensive framework for identifying security threats.
LA
Lawrence
2 years ago
OWASP threat modeling seems like a good option too, but I'm not sure if it's the best fit for this specific scenario. The Microsoft Cloud Adoption Framework is the focus here.
DA
Dana
2 years ago
I agree with Crissy, the STRIDE model is a good starting point for threat modeling.
VE
Verdell
2 years ago
I think the STRIDE model is the way to go. It's a well-established framework for threat modeling, and it aligns perfectly with the Microsoft Cloud Adoption Framework.
CR
Crissy
2 years ago
I think we should use the STRIDE model to start the threat modeling process.