Bird
0
0

Why is it important to consider both STRIDE and DREAD models when performing threat modeling?

hard🧠 Conceptual Q10 of 15
Cybersecurity - Security Architecture and Design
Why is it important to consider both STRIDE and DREAD models when performing threat modeling?
ABecause STRIDE manages user access and DREAD monitors system logs
BBecause STRIDE identifies threat types and DREAD helps assess their risk levels
CBecause STRIDE encrypts data and DREAD detects intrusions
DBecause STRIDE and DREAD are competing standards and only one should be used
Step-by-Step Solution
Solution:
  1. Step 1: Define STRIDE and DREAD roles

    STRIDE helps identify different types of threats; DREAD scores threats to understand their risk.
  2. Step 2: Explain importance of using both

    Using both models together provides a complete view: what threats exist and how serious they are.
  3. Final Answer:

    Because STRIDE identifies threat types and DREAD helps assess their risk levels -> Option B
  4. Quick Check:

    STRIDE + DREAD = Identify + Assess risk [OK]
Quick Trick: Use STRIDE and DREAD together for full threat view [OK]
Common Mistakes:
MISTAKES
  • Thinking STRIDE encrypts or manages access
  • Believing DREAD detects intrusions
  • Assuming they are competing and exclusive

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Cybersecurity Quizzes