Microsoft Exam SC-100 Topic 10 Question 33 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 33
Topic #: 10

Your company plans to follow DevSecOps best practices of the Microsoft Cloud Adoption Framework for Azure.

You need to perform threat modeling by using a top-down approach based on the Microsoft Cloud Adoption Framework for Azure.

What should you use to start the threat modeling process?

Athe STRIDE model

Bthe DREAD model

COWASP threat modeling

Show Suggested Answer

Suggested Answer: A, D

by Jerry at Dec 22, 2023, 05:12 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Candra

2 months ago

I'm going with the STRIDE model. It's the threat modeling equivalent of a 'Skittles and Mountain Dew' combo - it just works for this kind of thing.

upvoted 0 times

Gladis

7 days ago

User 3: OWASP threat modeling is another good option to consider for a comprehensive approach.

upvoted 0 times

...

Hyun

16 days ago

User 2: I think the DREAD model could also be useful in this situation.

upvoted 0 times

...

Arletta

21 days ago

User 1: I agree, the STRIDE model is a great starting point for threat modeling.

upvoted 0 times

...

Milly

2 months ago

I'm just hoping the exam doesn't ask us to threat model a cloud-based app using Tamagotchi as the threat model. That would be a real head-scratcher!

upvoted 0 times

Tracey

14 days ago

C) OWASP threat modeling

upvoted 0 times

...

Rosita

2 months ago

B) the DREAD model

upvoted 0 times

...

Anisha

2 months ago

A) the STRIDE model

upvoted 0 times

...

Laurene

2 months ago

I prefer using the OWASP threat modeling approach, as it provides a comprehensive framework for identifying security threats.

upvoted 0 times

...

Lorriane

2 months ago

I agree with Twila, the STRIDE model is a good starting point for threat modeling.

upvoted 0 times

...

Twila

2 months ago

I think we should use the STRIDE model to start the threat modeling process.

upvoted 0 times

...

Magdalene

2 months ago

The DREAD model? Really? I thought that was old news. Let's stick to something more modern and relevant, like the STRIDE model.

upvoted 0 times

Herminia

1 months ago

User 2: Definitely, we should use the STRIDE model for threat modeling.

upvoted 0 times

...

Pearly

1 months ago

User 1: I agree, the DREAD model is outdated.

upvoted 0 times

...

Merilyn

1 months ago

User 2: Yeah, the DREAD model is old news. STRIDE is the way to go.

upvoted 0 times

...

Carmen

2 months ago

User 1: I agree, the STRIDE model is more modern and relevant.

upvoted 0 times

...

Oneida

2 months ago

I personally prefer the OWASP threat modeling approach, as it provides a comprehensive framework for identifying security threats.

upvoted 0 times

...

Lawrence

2 months ago

OWASP threat modeling seems like a good option too, but I'm not sure if it's the best fit for this specific scenario. The Microsoft Cloud Adoption Framework is the focus here.

upvoted 0 times

...

Dana

2 months ago

I agree with Crissy, the STRIDE model is a good starting point for threat modeling.

upvoted 0 times

...

Verdell

2 months ago

I think the STRIDE model is the way to go. It's a well-established framework for threat modeling, and it aligns perfectly with the Microsoft Cloud Adoption Framework.

upvoted 0 times

...

Crissy

2 months ago

I think we should use the STRIDE model to start the threat modeling process.

upvoted 0 times

...