nerdexam
(ISC)2

CCSP · Question #736

What concept does the A represent within the DREAD model?

The correct answer is A. Affected users. The DREAD model is a risk-scoring framework with five components: Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability. The 'A' stands for Affected users, which scores how many users (or systems) would be impacted if a vulnerability were…

Submitted by haru.x· Apr 18, 2026Legal, Risk and Compliance

Question

What concept does the A represent within the DREAD model?

Options

  • AAffected users
  • BAuthorization
  • CAuthentication
  • DAffinity

How the community answered

(32 responses)
  • A
    91% (29)
  • B
    3% (1)
  • C
    6% (2)

Explanation

The DREAD model is a risk-scoring framework with five components: Damage potential, Reproducibility, Exploitability, Affected users, and Discoverability. The 'A' stands for Affected users, which scores how many users (or systems) would be impacted if a vulnerability were exploited. A higher number of affected users results in a higher DREAD score, indicating greater risk priority.

Topics

#DREAD model#Threat modeling#Risk assessment#Risk management

Community Discussion

No community discussion yet for this question.

Full CCSP Practice