An architect is creating a threat model for an agentic system. Which of the following should the architect do first?

The correct answer is B. Identify the trust boundary between the components. The first step in creating a threat model is to identify trust boundaries, which define where data or control transitions between different systems, users, or components. This helps map potential attack surfaces and informs subsequent risk analysis and control

Threat Management

Question

Options

AApply compensating controls based on exposure findings.
BIdentify the trust boundary between the components.
CCalculate the risk to resources based on data sensitivity.
DScan for vulnerabilities from the Open Worldwide Application Security Project (OWASP) Top 10.

How the community answered

(44 responses)

A
5% (2)
B
77% (34)
C
14% (6)
D
5% (2)

Explanation

The first step in creating a threat model is to identify trust boundaries, which define where data or control transitions between different systems, users, or components. This helps map potential attack surfaces and informs subsequent risk analysis and control

Topics

#threat modeling#agentic AI#trust boundaries#security architecture

Community Discussion

No community discussion yet for this question.

Full CY0-001 Practice