Bonus Learning

Question 1

What are the benefits of threat hunting? (5)

Answer 1

Improve detection capabilities
Reduce attack surface
Block attack vectors
Identify important assets
Better security posture

Question 2

List the steps in the risk analysis process.

Answer 2

• Identify assets and their value
• Identify vulnerabilities and threats
• Quantify the probability and impact of the identified threats
• Balance the impact of the threat against the cost of the control or countermeasure.

Question 3

What are the four steps in the risk management process?

Answer 3

• Identify threats
• Assess the risk
• Respond to the risk
• Monitor the risk.

Question 4

Threat Modeling Steps

Answer 4

• Identify Assets
• Outline Architecture
• Decompose the Application
• Identify Threats
• Determine and Ranks Threats
• Determine Countermeasures and Mitigation

Question 5

Name the Steps of DREAD

Answer 5

Damage, Reproducibility, Exploitability, Affected Users, Discoverability

Question 6

What is the Process for Attack Simulation and Threat Analysis known as?

Answer 6

PASTA