Web Security · Senior · Question 2 of 75
When is threat modeling most useful?
- ✓Correct answer: During design, before the architecture is fixed, and again when it changes significantly
- 2Only after a breach, to write the report
- 3Only right before a pentest
Explanation
Design flaws like trusting a client-side role are cheap to fix on a whiteboard and expensive in production.