312-97 practice question 35 of 35

(Rachel McAdams has been working as a senior DevSecOps engineer in an IT company for the past 5 years. Her organization embraced AWS cloud service…

Choose your answer, then check it against the explanation.

(Rachel McAdams has been working as a senior DevSecOps engineer in an IT company for the past 5 years. Her organization embraced AWS cloud service due to robust security and cost-effective features offered by it. To take proactive decisions related to the security issues and to minimize the overall security risk, Rachel integrated ThreatModeler with AWS. ThreatModeler utilizes various services in AWS to produce a robust threat model. How can Rachel automatically generate the threat model of her organization’s current AWS environment in ThreatModeler?.)

Answer options

Correct Answer:

Explanation

ThreatModeler's Cloud Modeler feature includes an "Accelerator" specifically designed to automate the process of generating threat models from existing cloud environments. The Accelerator connects to an AWS account using provided credentials, scans the live infrastructure configuration, and automatically builds a corresponding architectural diagram and threat model. This eliminates the manual effort of diagramming the environment and provides an accurate, up-to-date representation for security analysis. This proactive approach aligns with the goal of minimizing security risks by modeling the actual deployed environment.

Why Incorrect

A. YAML spec–based tools are used for defining Infrastructure as Code (IaC) to build environments, not for discovering and modeling existing ones.

B. "Architect" is a generic term for a role or a diagramming tool; it is not the specific ThreatModeler feature for AWS automation.

C. STRIDE is a threat modeling methodology applied to a model; it is not the mechanism used to automatically generate the model itself.

References

1. ThreatModeler, Inc. (2023). ThreatModeler Cloud Modeler. Official Vendor Documentation. "ThreatModeler’s Cloud Modeler with its Accelerator for AWS automatically creates threat models of your existing AWS environment...". Retrieved from ThreatModeler's official product documentation.

2. ThreatModeler, Inc. (2022, November 15). ThreatModeler Announces Cloud Modeler to Automate Threat Modeling of Cloud Native Infrastructure. Official Press Release. "The ThreatModeler Cloud Modeler includes an Accelerator for AWS that ingests live AWS infrastructure configurations...".

Question 35 of 35

Keep practicing

Take the free 312-97 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test