SC-100 Practice Question 3876
Exam: SC-100
Domain: Design solutions that align with security best practices and priorities
Difficulty: medium
Your executive team requires a threat modeling methodology to evaluate security risks in an upcoming AI-powered financial application. Which methodology is recommended by Microsoft?
Answer Options
A
The STRIDE threat modeling methodology
B
The Waterfall project management methodology
C
The Six Sigma manufacturing control methodology
D
The Agile sprint estimation framework
Correct Answer
A: The STRIDE threat modeling methodology
Explanation
The STRIDE threat modeling methodology categorizes threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.