Question

Which is not part of a threat Modelling process?

- Identify Security Objectives

- Identify Threats & Vulnerabilities

- Compose Applications

- Survey the Application

Answer 1

C) Compose Application

_________________________


➺❥• Threat modeling process involve -

- Identify Security Objectives

- Identify Threats & Vulnerabilities

- Survey the Application


But, it does not involve composing applications.

_________________________

Answer 2

Answer is option 3 - Compose Application.

More details:

Microsoft's process of threat modeling can be utilized to do the process of threat risk modeling, which performs below important tasks.

1. Identifying the security objectives.

2. Surveying or over-viewing of the application.

3. Decomposing the application.

4. Identifying threats  and vulnerabilities.

So, composing application is not a part of threat modelling process.

Hope it helps.