Cybersecurity - Security Architecture and Design
During threat modeling, a team incorrectly classifies a data leak as a 'Denial of Service' threat in STRIDE. What is the main problem?
During threat modeling, a team incorrectly classifies a data leak as a 'Denial of Service' threat in STRIDE. What is the main problem?
medium📝 Analysis Q7 of 15
Step-by-Step Solution
Solution:
Step 1: Understand correct STRIDE categories
Data leaks fall under Information Disclosure, not Denial of Service.Step 2: Consequence of misclassification
Wrong classification causes the team to choose ineffective security controls.Final Answer:
Misclassification leads to wrong mitigation strategies -> Option BQuick Check:
Correct classification guides proper defense [OK]
Quick Trick: Classify threats correctly to fix them right [OK]
Common Mistakes:
MISTAKES- Thinking Denial of Service covers data leaks
- Ignoring importance of correct threat category
- Assuming data leaks are not threats
Master "Security Architecture and Design" in Cybersecurity
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Cybersecurity Quizzes