- | Page
WGU D487: Secure Software Design Actual
Questions with 100% CORRECT ANSWER s |Latest
Question 1: What are the two common best principles of
software applications in the development process? Choose 2 answers.
CORRECT ANSWER : Quality code Secure code
Question 2: What ensures that the user has the appropriate role
and privilege to view data?
CORRECT ANSWER : Authorization
Question 3: Which security goal is defined by "guarding against
improper information modification or destruction and ensuring information non-repudiation and authenticity"?
CORRECT ANSWER : Integrity
Question 4: Which phase in an SDLC helps to define the
problem and scope of any existing systems and determine the objectives of new systems?
CORRECT ANSWER : Planning
Question 5: What happens during a dynamic code review?
- | Page
CORRECT ANSWER : Programmers monitor system memory,
functional behavior, response times, and overall performance.
Question 6: How should you store your application user
credentials in your application database?
CORRECT ANSWER : Store credentials using salted hashes
Question 7: Which software methodology resembles an
assembly-line approach?
CORRECT ANSWER: Waterfall model
Question 8: Which software methodology approach provides
faster time to market and higher business value?
CORRECT ANSWER : Agile model
Question 9: In Scrum methodology, who is responsible for
making decisions on the requirements?
CORRECT ANSWER : Product Owner
- | Page
Question 10: What is the reason software security teams host
discovery meetings with stakeholders early in the development life cycle?
CORRECT ANSWER : To ensure that security is built into the
product from the start
Question 11: Why should a security team provide documented
certification requirements during the software assessment phase?
CORRECT ANSWER : Depending on the environment in which
the product resides, certifications may be required by corporate or government entities before the software can be released to customers.
Question 12: What are two items that should be included in the
privacy impact assessment plan regardless of which methodology is used? Choose 2 answers.
CORRECT ANSWER : Required process steps Technologies
and techniques
- | Page
Question 13: What are the goals of each SDL deliverable?
Product risk profile, SDL project outline, Threat profile, List of third-party software
CORRECT ANSWER : Estimate the actual cost of the product
Map security activities to the development schedule Guide security activities to protect the product from vulnerabilities Identify dependence on unmanaged software
Question 14: What is a threat action that is designed to illegally
access and use another person's credentials?
CORRECT ANSWER : Spoofing
Question 15: What are two steps of the threat modeling process?
Choose 2 answers.
CORRECT ANSWER : Survey the application Decompose the
application
Question 16: What do the "A" and the first "D" in the DREAD
acronym represent? Choose 2 answers.