Susan is conducting a STRIDE threat assessment by placing threats into one or more of the following categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. As part of her assessment, she has discovered an issue that allows transactions to be modified between a web browser and the application server that it accesses. What STRIDE categorization(s) best fit this issue?

A. Tampering and Information Disclosure
B. Spoofing and Tampering
C. Tampering and Repudiation
D. Information Disclosure and Elevation of Privilege


Answer: A. Tampering and Information Disclosure

Computer Science & Information Technology

You might also like to view...

A(n) ____________________ is a set of character and paragraph attributes that you can define and name.

Fill in the blank(s) with the appropriate word(s).

Computer Science & Information Technology

Increasing the value in the ________ option in the Paragraph dialog box will increase the amount of spacing above each paragraph of text in the selected placeholder

A) Spacing Before B) Line Spacing C) Spacing After D) Indentation

Computer Science & Information Technology

The Boolean variable was developed by Tim Berners-Lee, who also developed logical concepts.

Answer the following statement true (T) or false (F)

Computer Science & Information Technology

A ____ loop is best used when the specific number of iterations required is known.

A. Do…While B. Do…Until C. For...Next D. For…Until

Computer Science & Information Technology