Which of the following threat-modeling procedures is in the OWASP Web Security Testing Guide?

The correct answer is C. Decomposing the application. The OWASP Web Security Testing Guide (WSTG) includes a section on threat modeling, which is a structured approach to identify, quantify, and address the security risks associated with an application. The first step in the threat modeling process is decomposing the application…

Submitted by wei.xz· Mar 6, 2026Vulnerability Management

Question

Options

AReview of security requirements
BCompliance checks
CDecomposing the application
DSecurity by design

How the community answered

(30 responses)

A
7% (2)
B
3% (1)
C
90% (27)

Explanation

The OWASP Web Security Testing Guide (WSTG) includes a section on threat modeling, which is a structured approach to identify, quantify, and address the security risks associated with an application. The first step in the threat modeling process is decomposing the application, which involves creating use cases, identifying entry points, assets, trust levels, and data flow diagrams for the application. This helps to understand the application and how it interacts with external entities, as well as to identify potential threats and vulnerabilities.

Topics

#Threat modeling#OWASP#Application security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice