Chapter 1 - Governance

Question 1

Threat Modeling: Stride

Answer 1

Spoofing, Tampering, Repudiation, Info Disclosure, Denial of Service, Escalation of Privilege

Question 2

Threat Modeling: Dread

Answer 2

Damage Potential, Reproducibility, Exploitability, Affected Users, Discoverability

Question 3

Gov Data Classifications

Answer 3

Top Secret - drastic effects/grave damage
Secret - significant effects/critical damage
Confidential - noticeable effects/serious damage
Sensitive but Unclassified
Unclassified - No damage

Question 4

Corp Data Classifications

Answer 4

Confidential (Proprietary)
Private
Sensitive
Public