フリー問題

問題文

During a threat modeling session the team notes that a trader can later deny having submitted an order, because the system keeps no record that only that trader could have produced. Which category does that finding fall into?

選択肢

1. That finding belongs to the disclosure gap category in that classification.
2. That finding belongs to the spoofing susceptibility category in that classification.
3. That finding belongs to the repudiation exposure category in that classification.
4. That finding belongs to the tampering weakness category in that classification.