Hello I need help answering these 10 Information Security questions.

1. CVSS is a tool for a) calculating risk b) discovering vulnerabilities c) scoring threats d) assessing impact

2. An attack tree has at the root the a) cost of the attack b) identity of threat agent c) the attack vector d) goal of the attack

3. TRIKE threat modeling a) is basically an audit framework b) makes use of DFD c) makes use of a continuous scale based on probability d) does not assess threat actors

4. In DREAD modelling technique the quantitative risk score is based on a) Reproducibility b) Discoverability c) Exploitability d) All the above

5. Threat modeling a) synthesizes an application b) evaluates risks c) should be done early in the system development life cycle d) helps in designing a system

6. When computerizing a new system, threat modeling should be caried out a) at the systems analysis phase b) at the design phase c) at the integration testing phase d) at the requirement specification phase.

7. A DMZ is a) a zone in a data center where customers servers are installed b) an area between the internal and external networks c) no mans land in cyber warfare d) a trusted internal network area

8. Threat modeling does not involve a) identifying vulnerabilities b) addressing threats c) decomposing the system d) identifying security objectives

9. Trust boundary is a) always drawn between two process in a DFD b) a networks perimeter c) an imaginary boundary between two domains that do not trust each other d) a boundary between two domains that trust each other

10. Spoofing is an attack that violates the following security property a) confidentiality b) integrity c) availability d) authentication

Please answer all 10 questions and make sure to give the proper response to each question. Thank you.