StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 404 of 498 · medium

A signed-in customer changes a request field and performs an operation reserved for administrators. Which STRIDE concern is most directly illustrated?

Choose the single best answer.

  1. A.Repudiation as the only described threat
  2. B.Elevation of privilege
  3. C.Denial of service as the only described threat
  4. D.Information disclosure as the only described threat
Show the answer and explanation

✓ Correct answer

  • Elevation of privilege

Executing an administrator-only operation as an ordinary user illustrates elevation of privilege. Disclosure concerns unauthorized data exposure, repudiation concerns denial of actions, and denial of service concerns availability loss. Those outcomes are not the primary behavior described.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.