Secure-Software-Design Exam Questions & Answers
WGU Secure Software Design (D487, KEO1) Exam • WGU
100% money-back guarantee
Sample Secure-Software-Design Questions
Practice with real exam-style questions, each with the verified correct answer and explanation.
What is the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or distribution to provide confidentiality, integrity, and availability?
Which security assessment deliverable identities possible security vulnerabilities in the product?
A threat profile is a security assessment deliverable that identifies possible security vulnerabilities in a product. It involves a systematic examination of the product to uncover any weaknesses that could potentially be exploited by threats. The process typically includes identifying the assets that need protection, assessing the threats to those assets, and evaluating the vulnerabilities that could be exploited by those threats. This deliverable is crucial for understanding the security posture of a product and for prioritizing remediation efforts.
Credit card numbers are encrypted when stored in the database but are automatically decrypted when data is fetched. The testing tool intercepted the GET response, and testers were able to view credit card numbers as clear text.
How should the organization remediate this vulnerability?
The core issue here is cleartext transmission of sensitive data, and option C directly addresses this:
Addressing the Problem: The scenario reveals the vulnerability is the lack of encryption during data transmission (the GET response). Ensuring encryption in transit fixes this specific exploit.
Transport Layer Security: Encryption during transit is typically achieved through protocols like TLS (HTTPS), preventing the interception of sensitive information.
Which secure coding best practice says to only use tested and approved components and use task-specific, built-in APIs to conduct operating system functions?
Which design and development deliverable contains the types of evaluations that were performed, how many times they were performed, and how many times they were re-evaluated?
Security testing reports are the most likely deliverables to contain detailed records of evaluations, their frequency, and re-evaluations. Here's why:
Purpose of Security Testing Reports: These reports document the results of security testing, including:
Types of tests: Vulnerability scans, penetration tests, code reviews, etc.
Frequency: How often tests were conducted (e.g., per build, per release cycle).
Re-evaluations: If vulnerabilities were discovered, these reports will track whether and how often those were retested after remediation.
Focus on Testing: The question specifically emphasizes evaluations, which aligns with the core content of security testing reports.
Get access to all 118 verified questions with detailed answers.
Unlock All Secure-Software-Design Questions