Security Architecture and Engineering
Question #66
You are conducting a threat modeling exercise using the STRIDE model for a new online payment system. Which of the following threats is NOT accurately matched with its category?
A. Tampering - An attacker modifying the system’s data or code.
B. Repudiation - An attacker denying that they performed an action without proof.
C. Information Disclosure - An attacker preventing the system from performing its intended function.
D. Spoofing - An attacker impersonating a legitimate user to gain unauthorized access.
Domain Concept: Security Architecture and Engineering
This scenario evaluates management-level decision making in Security Architecture and Engineering. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.