CSSLP · Question #401
What aspect of a system does a data flow diagram most clearly represent?
The correct answer is C. Data movement and storage. A Data Flow Diagram (DFD) visually represents how data moves through a system, illustrating processes, data stores, external entities, and the flow of information between them.
Question
What aspect of a system does a data flow diagram most clearly represent?
Options
- ACloud IAM
- BPotential attack scenarios
- CData movement and storage
- DUser privilege assignments
How the community answered
(34 responses)- A6% (2)
- B3% (1)
- C91% (31)
Why each option
A Data Flow Diagram (DFD) visually represents how data moves through a system, illustrating processes, data stores, external entities, and the flow of information between them.
Cloud IAM (Identity and Access Management) defines user permissions and access controls, which are not directly visualized by a DFD.
While DFDs can be used as a basis for threat modeling by identifying data flows and trust boundaries, they do not inherently represent potential attack scenarios themselves.
A Data Flow Diagram (DFD) is a graphical representation that illustrates the movement of data through a system. It shows how data enters and leaves the system, where it is stored, and the processes that transform it, thereby clearly representing data movement and storage and the logical flow of information.
User privilege assignments are part of access control mechanisms and are not the primary focus or clear representation of a DFD.
Concept tested: Purpose of Data Flow Diagrams (DFD)
Source: https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-dfd
Topics
Community Discussion
No community discussion yet for this question.