WGU D385
SOFTWARE SECURITY AND TESTING
PERFORMANCE ASSESSMENT TASK
2
Vulnerability Remediation • Parameterized SQL • Bearer Authentication • Secret
Management • Password Hashing • Security Tests
COMPLETE RUBRIC-ALIGNED SAMPLE REPORT
2026 Updated Edition
Student Name: [Your Name]
Student ID: [Your ID]
Submission Date: [Date]
, Submission and Integrity Notice
This is an original rubric-aligned sample, not an official WGU template or evaluated submission. Replace identity fields and
adapt every filename, rubric label, vulnerability, code change, screenshot, and citation to the current project supplied in the
student portal.
All figures were generated by executing the included original Python/SQLite sample. They show authentic outputs from eight
unit tests, parameterized database operations, API-style status handling, an educational AST scanner, and Python
compilation. They do not claim to be Bandit, Flake8, WGU, or proprietary application screenshots.
Recommended Task 2 package
D385_Task2_Submission.zip
|-- D385_Task2_Report.docx
|-- D385_Task2_Evidence.pdf
`-- D385_Task2_Code/
|-- main.py
|-- test_run.py
|-- requirements.txt
`-- .env.example
Never place real secrets in a submitted .env file. Use harmless placeholders in .env.example unless the current task explicitly
supplies and requires specific test values. Follow the current portal instructions when they conflict with this sample.
WGU D385 - Software Security and Testing V2 | Task 2 Sample Report | 2026 Page 2
, Table of Contents
Section Topic
1 Executive summary and vulnerability selection
2 Baseline static analysis
3 D1 - API and database implementation overview
4 Remediation 1: SQL injection
5 Remediation 2: hardcoded secrets
6 Remediation 3: weak authentication
7 Remediation 4: error disclosure
8 Password protection and sensitive-data minimization
9 D2 - API and database defect log
10 Automated security tests and evidence
11 D3 - Defense-in-depth justification
12 D4 - Value of automated security scans
13 Residual risk and conclusion
Appendix A Selected source code
Appendix B Evidence, checklist, and references
WGU D385 - Software Security and Testing V2 | Task 2 Sample Report | 2026 Page 3
SOFTWARE SECURITY AND TESTING
PERFORMANCE ASSESSMENT TASK
2
Vulnerability Remediation • Parameterized SQL • Bearer Authentication • Secret
Management • Password Hashing • Security Tests
COMPLETE RUBRIC-ALIGNED SAMPLE REPORT
2026 Updated Edition
Student Name: [Your Name]
Student ID: [Your ID]
Submission Date: [Date]
, Submission and Integrity Notice
This is an original rubric-aligned sample, not an official WGU template or evaluated submission. Replace identity fields and
adapt every filename, rubric label, vulnerability, code change, screenshot, and citation to the current project supplied in the
student portal.
All figures were generated by executing the included original Python/SQLite sample. They show authentic outputs from eight
unit tests, parameterized database operations, API-style status handling, an educational AST scanner, and Python
compilation. They do not claim to be Bandit, Flake8, WGU, or proprietary application screenshots.
Recommended Task 2 package
D385_Task2_Submission.zip
|-- D385_Task2_Report.docx
|-- D385_Task2_Evidence.pdf
`-- D385_Task2_Code/
|-- main.py
|-- test_run.py
|-- requirements.txt
`-- .env.example
Never place real secrets in a submitted .env file. Use harmless placeholders in .env.example unless the current task explicitly
supplies and requires specific test values. Follow the current portal instructions when they conflict with this sample.
WGU D385 - Software Security and Testing V2 | Task 2 Sample Report | 2026 Page 2
, Table of Contents
Section Topic
1 Executive summary and vulnerability selection
2 Baseline static analysis
3 D1 - API and database implementation overview
4 Remediation 1: SQL injection
5 Remediation 2: hardcoded secrets
6 Remediation 3: weak authentication
7 Remediation 4: error disclosure
8 Password protection and sensitive-data minimization
9 D2 - API and database defect log
10 Automated security tests and evidence
11 D3 - Defense-in-depth justification
12 D4 - Value of automated security scans
13 Residual risk and conclusion
Appendix A Selected source code
Appendix B Evidence, checklist, and references
WGU D385 - Software Security and Testing V2 | Task 2 Sample Report | 2026 Page 3
