Scenario based questions to address threats and vulnerable components Risk and mitigation strategies Threat modeling using stride Cloud security concepts On prem security hardening Web application security enhancement Api endpoint access restrictions