What does an attack tree represent?

• A. A diagram of network performance
• B. A hierarchical structure for security threats
• C. A model of authentication layers
• D. A method for disaster recovery planning

Answer: (B)

An attack tree represents a hierarchical structure for security threats, which is critical in understanding and analyzing potential security risks within a system. The tree-like diagram visually organizes threats by breaking them down into various components, where the root represents the ultimate goal of an attacker, and the branches depict different strategies or methods that could lead to that goal. This structured approach helps to identify vulnerabilities, assess the likelihood of different threat scenarios, and prioritize security measures effectively. By modeling threats in this manner, organizations can bolster their security posture by focusing on the most critical risks and developing strategies to mitigate them.

The other options do not accurately characterize attack trees: a diagram of network performance focuses on the efficiency and health of a network rather than security threats. A model of authentication layers pertains specifically to how access is controlled within a system. Finally, disaster recovery planning deals with preparing for and recovering from significant events that disrupt operations, which is distinct from the threat assessment represented by an attack tree.