QA Fundamentals · Senior · Question 36 of 76
What is a threat model useful for in testing?
- 1It models how many users will visit the site
- 2It lists the testers who are a threat to deadlines
- 3It shows attack paths and assets, guiding security test design
Show the answer
Correct answer: It shows attack paths and assets, guiding security test design
Explanation
Knowing what attackers want and how they could get it (STRIDE, data flow diagrams) points tests at the riskiest entry points.