Question 1mediummultiple choice
Read the full Secure Software Lifecycle Management explanation →When performing a threat model using the STRIDE methodology, which component are you analyzing when you evaluate the risk of an attacker sniffing traffic between a client and the web server?
Trap 1: Elevation of Privilege.
This involves gaining permissions beyond authorized limits.
Trap 2: Tampering.
Tampering involves modifying data in transit or at rest.
Trap 3: Spoofing.
Spoofing involves pretending to be another entity.
- A
Elevation of Privilege.
Why wrong: This involves gaining permissions beyond authorized limits.
- B
Tampering.
Why wrong: Tampering involves modifying data in transit or at rest.
- C
Information Disclosure.
Information Disclosure occurs when unauthorized parties gain access to sensitive data.
- D
Spoofing.
Why wrong: Spoofing involves pretending to be another entity.