WGU C706 Secure Software Design Study Guide Questions
and Answers (2024/2025) (Verified Answers)
Confidentiality z- zANS-Information zis znot zmade zavailable zor zdisclosed zto
zunauthorized zindividuals, zentities, zor zprocesses. zEnsures zunauthorized zpersons zare
znot zable zto zread zprivate zand zsensitive zdata. zIt zis zachieved zthrough zcryptography.
Integrity z- zANS-Ensures zunauthorized zpersons zor zchannels zare znot zable zto zmodify
zthe zdata. zIt zis zaccomplished zthrough zthe zuse zof za zmessage zdigest zor zdigital
zsignatures.
Availability z- zANS-The zcomputing zsystems zused zto zstore zand zprocess zinformation,
zthe zsecurity zcontrols zused zto zprotect zinformation, zand zthe zcommunication zchannels
zused zto zaccess zinformation zmust zbe zfunctioning zcorrectly. zEnsures zsystem
zremains zoperational zeven zin zthe zevent zof za zfailure zor zan zattack. zIt zis zachieved zby
zproviding zredundancy zor zfault ztolerance zfor za zfailure zof za zsystem zand zits
zcomponents.
Ensure zConfidentiality z- zANS-Public zKey zInfrastructure z(PKI) zand
zCryptography/Encryption
Ensure zAvailability z- zANS-Offsite zback-up zand zRedundancy
,Ensure zIntegrity z- zANS-Hashing, zMessage zDigest z(MD5), znon zrepudiation zand
zdigital zsignatures
Software zArchitect z- zANS-Moves zanalysis zto zimplementation zand zanalyzes zthe
zrequirements zand zuse zcases zas zactivities zto zperform zas zpart zof zthe zdevelopment
zprocess; zcan zalso zdevelop zclass zdiagrams.
Security zPractitioner zRoles z- zANS-Release zManager, z
Architect, zDeveloper, zBusiness zAnalyst/Project zManager
Release zManager z- zANS-Deployment
Architect z- zANS-Design
Developer z- zANS-Coding
Business zAnalyst/Project zManager z- zANS-Requirements zGathering
Red zTeam z- zANS-Teams zof zpeople zfamiliar zwith zthe zinfrastructure zof zthe zcompany
zand zthe zlanguages zof zthe zsoftware zbeing zdeveloped. zTheir zmission zis zto zkill zthe
zsystem zas zthe zdevelopers zbuild zit.
, Static zAnalysis z- zANS-A zmethod zof zcomputer zprogram zdebugging zthat zis zdone zby
zexamining zthe zcode zwithout zexecuting zthe zprogram. zThe zprocess zprovides zan
zunderstanding zof zthe zcode zstructure, zand zcan zhelp zto zensure zthat zthe zcode
zadheres zto zindustry zstandards. zIt's zalso zreferred zas zcode zreview.
MD5 zHash z- zANS-A zwidely zused zhash zfunction zproducing za z128-bit zhash zvalue.
zInitially zdesigned zto zbe zused zas za zcryptographic zhash zfunction, zit zhas zbeen zfound
zto zsuffer zfrom zextensive zvulnerabilities. zIt zcan zstill zbe zused zas za zchecksum zto
zverify zdata zintegrity, zbut zonly zagainst zunintentional zcorruption.
SHA-256 z(Secure zHash zAlgorithm) z- zANS-One zof za znumber zof zcryptographic zhash
zfunctions. zA zcryptographic zhash zis zlike za zsignature zfor za ztext zor za zdata zfile.
zGenerates zan zalmost-unique, zfixed zsize z32-byte z
(32 zX z8) zhash. zHash zis za zone-way zfunction z- zit zcannot zbe zdecrypted.
Advanced zEncryption zStandard z(AES) z- zANS-A zsymmetric zencryption zalgorithm.
zThe zalgorithm zwas zdeveloped zby ztwo zBelgian zcryptographers zJoan zDaemen zand
zVincent zRijmen. zDesigned zto zbe zefficient zin zboth zhardware zand zsoftware, zand
zsupports za zblock zlength zof z128 zbits zand zkey zlengths zof z128, z192, zand z256 zbits.
Algorithms zused zto zverify zintegrity z- zANS-MD5 zHash, zSHA-256
Algorithm zused zto zverify zconfidentiality z- zANS-Advanced zEncryption zStandard z(AES)
and Answers (2024/2025) (Verified Answers)
Confidentiality z- zANS-Information zis znot zmade zavailable zor zdisclosed zto
zunauthorized zindividuals, zentities, zor zprocesses. zEnsures zunauthorized zpersons zare
znot zable zto zread zprivate zand zsensitive zdata. zIt zis zachieved zthrough zcryptography.
Integrity z- zANS-Ensures zunauthorized zpersons zor zchannels zare znot zable zto zmodify
zthe zdata. zIt zis zaccomplished zthrough zthe zuse zof za zmessage zdigest zor zdigital
zsignatures.
Availability z- zANS-The zcomputing zsystems zused zto zstore zand zprocess zinformation,
zthe zsecurity zcontrols zused zto zprotect zinformation, zand zthe zcommunication zchannels
zused zto zaccess zinformation zmust zbe zfunctioning zcorrectly. zEnsures zsystem
zremains zoperational zeven zin zthe zevent zof za zfailure zor zan zattack. zIt zis zachieved zby
zproviding zredundancy zor zfault ztolerance zfor za zfailure zof za zsystem zand zits
zcomponents.
Ensure zConfidentiality z- zANS-Public zKey zInfrastructure z(PKI) zand
zCryptography/Encryption
Ensure zAvailability z- zANS-Offsite zback-up zand zRedundancy
,Ensure zIntegrity z- zANS-Hashing, zMessage zDigest z(MD5), znon zrepudiation zand
zdigital zsignatures
Software zArchitect z- zANS-Moves zanalysis zto zimplementation zand zanalyzes zthe
zrequirements zand zuse zcases zas zactivities zto zperform zas zpart zof zthe zdevelopment
zprocess; zcan zalso zdevelop zclass zdiagrams.
Security zPractitioner zRoles z- zANS-Release zManager, z
Architect, zDeveloper, zBusiness zAnalyst/Project zManager
Release zManager z- zANS-Deployment
Architect z- zANS-Design
Developer z- zANS-Coding
Business zAnalyst/Project zManager z- zANS-Requirements zGathering
Red zTeam z- zANS-Teams zof zpeople zfamiliar zwith zthe zinfrastructure zof zthe zcompany
zand zthe zlanguages zof zthe zsoftware zbeing zdeveloped. zTheir zmission zis zto zkill zthe
zsystem zas zthe zdevelopers zbuild zit.
, Static zAnalysis z- zANS-A zmethod zof zcomputer zprogram zdebugging zthat zis zdone zby
zexamining zthe zcode zwithout zexecuting zthe zprogram. zThe zprocess zprovides zan
zunderstanding zof zthe zcode zstructure, zand zcan zhelp zto zensure zthat zthe zcode
zadheres zto zindustry zstandards. zIt's zalso zreferred zas zcode zreview.
MD5 zHash z- zANS-A zwidely zused zhash zfunction zproducing za z128-bit zhash zvalue.
zInitially zdesigned zto zbe zused zas za zcryptographic zhash zfunction, zit zhas zbeen zfound
zto zsuffer zfrom zextensive zvulnerabilities. zIt zcan zstill zbe zused zas za zchecksum zto
zverify zdata zintegrity, zbut zonly zagainst zunintentional zcorruption.
SHA-256 z(Secure zHash zAlgorithm) z- zANS-One zof za znumber zof zcryptographic zhash
zfunctions. zA zcryptographic zhash zis zlike za zsignature zfor za ztext zor za zdata zfile.
zGenerates zan zalmost-unique, zfixed zsize z32-byte z
(32 zX z8) zhash. zHash zis za zone-way zfunction z- zit zcannot zbe zdecrypted.
Advanced zEncryption zStandard z(AES) z- zANS-A zsymmetric zencryption zalgorithm.
zThe zalgorithm zwas zdeveloped zby ztwo zBelgian zcryptographers zJoan zDaemen zand
zVincent zRijmen. zDesigned zto zbe zefficient zin zboth zhardware zand zsoftware, zand
zsupports za zblock zlength zof z128 zbits zand zkey zlengths zof z128, z192, zand z256 zbits.
Algorithms zused zto zverify zintegrity z- zANS-MD5 zHash, zSHA-256
Algorithm zused zto zverify zconfidentiality z- zANS-Advanced zEncryption zStandard z(AES)
