What concept does the "A" represent in the DREAD model?

The correct answer is A. Affected users. The DREAD model is a risk-scoring framework used to evaluate and prioritize security threats. Each letter stands for: D = Damage potential, R = Reproducibility, E = Exploitability, A = Affected users, D = Discoverability. The 'Affected users' component scores how many users…

Submitted by tom_us· Apr 18, 2026Legal, Risk and Compliance

Question

Options

AAffected users
BAuthentication
CAffinity
DAuthorization

How the community answered

(32 responses)

A
88% (28)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

The DREAD model is a risk-scoring framework used to evaluate and prioritize security threats. Each letter stands for: D = Damage potential, R = Reproducibility, E = Exploitability, A = Affected users, D = Discoverability. The 'Affected users' component scores how many users would be impacted if the vulnerability were exploited, helping teams prioritize threats that have the broadest potential impact. The remaining choices (Authentication, Affinity, Authorization) are not part of the DREAD model.

Topics

#DREAD model#Threat modeling#Risk assessment#Affected users

Community Discussion

No community discussion yet for this question.

Full CCSP Practice