Which threat modeling step identifies the assets that need to be protected?
Suggested Answer: A
Get Premium Secure Software Design (D487) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
SH
Shawnda
1 month ago
D) Identify and Document Threats seems too late in the process. We need to start with A).
TA
Tayna
1 month ago
I feel like C) Rate Threats is also important, but only after identifying assets.
DE
Deja
1 month ago
True, but identifying assets is foundational. A) Set the Scope is crucial.
MO
Mozell
2 months ago
But what about B) Analyze the Target? It helps understand the environment too.
RO
Rosann
2 months ago
I agree, A) Set the Scope is key. Without knowing the assets, how can we proceed?
BE
Bette
2 months ago
I think it's A) Set the Scope. It makes sense to define what we need to protect first.
ME
Melda
2 months ago
I disagree, I think it's more about C) Rate Threats.
CA
Catina
2 months ago
Wait, are we sure about that?
TO
Tonette
2 months ago
A) Set the Scope is the right choice!
RE
Ressie
3 months ago
I thought it was B) Analyze the Target?
CY
Cyndy
3 months ago
It's definitely A) Set the Scope.
AN
Annmarie
3 months ago
I feel like "Analyze the Target" could also be relevant, but I lean towards "Set the Scope" for identifying assets. It just makes sense to outline what we're protecting first.
LI
Lindy
3 months ago
I'm a bit confused. I thought "Identify and Document Threats" was about assets too, but maybe that's more about the threats themselves?
GR
Graham
3 months ago
I remember practicing a question similar to this, and I think "Set the Scope" was the right answer because it helps define what we need to protect.
ED
Eden
4 months ago
I think the step that identifies the assets is "Set the Scope," but I'm not entirely sure. It feels like it could also relate to "Analyze the Target."