IntroNS Practice Exam 2026 – All-in-One Guide for Exam Success and Mastery!

STRIDE is a threat modeling framework that helps teams identify threats in a structured way by six categories: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. Spoofing covers impersonation, such as login spoofing where someone pretends to be another user to gain access. Tampering involves altering data or code, for example changing a transaction amount or modifying a stored file to corrupt information. Repudiation happens when an action can’t be reliably proven due to inadequate or tamperable logs, allowing someone to deny that they performed an action. Information Disclosure is about exposing data to unauthorized parties, such as transmitting sensitive data in the clear and letting an eavesdropper read it. Denial of Service focuses on making a service unavailable, like flooding a server with requests to exhaust its resources. Elevation of Privilege occurs when an attacker gains higher permissions than allowed, such as a user exploiting a flaw to run with administrative rights.

Choosing a description that names STRIDE and gives examples like login spoofing and data tampering fits this framework, because it demonstrates how impersonation and integrity threats are captured within the six categories. The other options mischaracterize STRIDE or its categories: it is not a cryptographic standard for key exchange, and the listed categories in those alternatives do not accurately reflect STRIDE’s six threat types.