nerdexam
(ISC)2

CSSLP · Question #401

What aspect of a system does a data flow diagram most clearly represent?

The correct answer is C. Data movement and storage. A Data Flow Diagram (DFD) visually represents how data moves through a system, illustrating processes, data stores, external entities, and the flow of information between them.

Secure Software Architecture and Design

Question

What aspect of a system does a data flow diagram most clearly represent?

Options

  • ACloud IAM
  • BPotential attack scenarios
  • CData movement and storage
  • DUser privilege assignments

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    91% (31)

Why each option

A Data Flow Diagram (DFD) visually represents how data moves through a system, illustrating processes, data stores, external entities, and the flow of information between them.

ACloud IAM

Cloud IAM (Identity and Access Management) defines user permissions and access controls, which are not directly visualized by a DFD.

BPotential attack scenarios

While DFDs can be used as a basis for threat modeling by identifying data flows and trust boundaries, they do not inherently represent potential attack scenarios themselves.

CData movement and storageCorrect

A Data Flow Diagram (DFD) is a graphical representation that illustrates the movement of data through a system. It shows how data enters and leaves the system, where it is stored, and the processes that transform it, thereby clearly representing data movement and storage and the logical flow of information.

DUser privilege assignments

User privilege assignments are part of access control mechanisms and are not the primary focus or clear representation of a DFD.

Concept tested: Purpose of Data Flow Diagrams (DFD)

Source: https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-dfd

Topics

#Data Flow Diagram (DFD)#System analysis#Software design#Data movement

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice