Review questions

1. Which of the following is considered a weakness that could be exploited by a malicious actor?
   1. Threat
   2. Threat actor
   3. Vulnerability
   4. Risk
2. Which of the following is the best phase to perform threat modeling?
   1. Requirements
   2. Design
   3. Development
   4. Testing
3. What could go wrong? corresponds to which phase of threat modeling?
   1. Model
   2. Identify
   3. Mitigate
   4. Validate
4. Which of the following vulnerabilities should be prioritized for remediation?
   1. Low
   2. Medium
   3. High
   4. Critical
5. Which scoring technique is used to quantify a vulnerability?
   1. CSS
   2. CSV
   3. CVSS
   4. CVVS