2. An attack tree has at the root the

a) cost of the attack

b) identity of threat agent

c) the attack vector

d) goal of the attack

3. TRIKE threat modeling

a) is basically an audit framework

b) makes use of DFD

c) makes use of a continuous scale based on probability

d) does not assess threat actors

4. In DREAD modelling technique the quantitative risk score is based on

a) Reproducibility

b) Discoverability

c) Exploitability

d) All the above