Match each STRIDE threat category to its correct definition: Threat Categories: 1. Spoofing 2. Tampering 3. Repudiation 4. Information disclosure 5. Denial of service 6. Elevation of privilege Definitions: A. Denying having performed a specific action or transaction B. Disrupting or preventing authorized access to a system or service C. Impersonating another person, system, or entity D. Gaining unauthorized access rights or higher administrative permissions E. Modifying data, code, or system state without authorization F. Exposing confidential or protected data to an unauthorized party

### The pairs | Item | Matches | Why | |---|---|---| | Spoofing | Pretending to be another entity | Spoofing misrepresents identity or origin. | | Tampering | Altering data or a system | Tampering changes information or system state. | | Repudiation | Denying an action or transaction | Repudiation concerns a party denying involvement or an action. | | Information disclosure | Exposing information to an unauthorized party | Disclosure threatens confidentiality. | | Denial of service | Preventing or disrupting access to a service | The attack affects whether users can obtain service. | | Elevation of privilege | Gaining permissions beyond those properly granted | The attacker obtains greater authority than intended. | ### Terms - **Privilege**: A permission or level of authority to use system resources. ### Remember Use the effect of an attack to distinguish disclosure, disruption, alteration, and unauthorized authority.