Question 14

Match the statement to its appropriate CIA letter.

Unauthorized disclosure of the identity

Violation of access control

Performance degradation

Violation of business rule

Unauthorized disclosure of the data

Violation of data integrity

Unavailability

A.	Confidentiality
B.	Integrity
C.	Availability
D.	None of the above

Once you have defined your application context, the Threat Analysis & Modeling tool can be used to automatically generate threats.

True

False

The process of measuring risk is very well defined and objective.

True

False

Use cases define what needs to happen, and calls define how it happens.

True

False

Attack _____ are the manifestation of one or more threats in the context of some specific technology(fill in blank)