CompTIA PenTest+ (PT0-003) — Question 137

Which of the following frameworks can be used to classify threats?

Answer options

• A. PTES
• B. STRIDE
• C. OSSTMM
• D. OCTAVE

Correct answer: B

Explanation

The correct answer is B, STRIDE, as it is specifically designed for threat modeling and helps in identifying and classifying potential threats. PTES, OSSTMM, and OCTAVE are valuable in their own right but do not focus primarily on threat classification like STRIDE does.