CompTIA PT0-003 Question Answer
Which of the following frameworks can be used to classify threats?
PTES
STRIDE
OSSTMM
OCTAVE
STRIDE is a threat classification model created by Microsoft that breaks down threats into six categories:
Spoofing
Tampering
Repudiation
Information disclosure
Denial of Service
Elevation of privilege
It is specifically designed for threat modeling.
PTES is a general pentesting methodology.
OSSTMM is a framework for operational security testing.
OCTAVE is a risk assessment methodology, not focused on threat classification.
TESTED 13 Jul 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved