Exam CISSP topic 1 question 218 discussion

The correct answer is D. While the other factors (A, B, C) can impact the security of a system, they may not necessarily require a revision of the threat model unless they introduce new potential threats that were not previously considered. The addition of a new data repository, on the other hand, can change the threat landscape of the system and introduce new potential threats that were not previously considered, making it a more likely trigger for revising the threat model.

the other options seem of too little impact compared to D

A new data repository is added, means a new a attack surface. threat Model should be reviewed and revised if needed.

D is correct. Adding a new data repository affects the attack vector.

"interviewed a member of the application development", then it is related with application modification => new repository