WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
Whatmismamstepmformconstructingmamthreatzmodelmformamprojectmwhenmusingmpracticalmriskzanalysis?
AmAlignmyourmbusinessmgoals
BmApplymengineeringmmethods
CmEstimate mprobabilitymofmprojectmtime
DzMakezazlistzofzwhatzyouzare ztryingztozprotectz-m ANSWER-
Whichmcybermthreatszare mtypicallymsurgicalmbymnature,mhavemhighlymspecificmtargeting,mandmaremtechnolo
gicalmlymsophisticated?
AzTacticalzattacks
BmCriminalmattacks
CmStrategicmattacks
DmUser-specificmattacksz-mANSWER-A
Whichmtype mofmcyberattacksmare moftenmintendedmtomelevate mawarenessmofmamtopic?
AmCyberwarfare
BmTacticalmattacks
CmUser-specificmattacks
DzSociopolitical zattacksz-m ANSWER-D
Whatmtype mofmattackmlocksmamuser'smdesktopmandmthenmrequiresmampaymentmtomunlockmit?
AmPhishing
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
BmKeylogger
CzRansomware
DmDenial-of-service m-mANSWER-C
Whatmismamcountermeasure magainstmvariousmformsmofmXMLmandmXMLmpathminjectionmattacks?
AmXMLmname zwrapping
BmXMLzunicode mencoding
CzXMLzattribute zescaping
DmXMLzdistinguishedmname mescapingm-mANSWER-C
Whichmcountermeasure mismusedmtommitigate mSQLminjectionmattacks?
AmSQLzFirewall
BmProjectedmbijection
CzQueryzparameterization
DmProgressive mColdFusionm-mANSWER-C
Whatmismanmappropriate mcountermeasure mtozanmescalationmofmprivilege mattack?
AmEnforcingzstrongmpasswordmpolicies
BmUsingmstandardmencryptionmalgorithmsmandmcorrectmkeymsizes
CmEnablingzthe mauditingmandmloggingzofmallmadministrationmactivities
DzRestrictingzaccessztozspecificzoperationszthroughzrole-basedzaccesszcontrolsz-zANSWER-D
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
Whichconfigurationmmanagementmsecuritymcountermeasure mimplementsmleastmprivilege maccessmcontrol?
AmFollowingmstrongmpasswordmpoliciesmtomrestrictmaccess
BzRestrictingzfilezaccessztozuserszbasedzonzauthorization
CmAvoidingmclearmtextmformatmformcredentialsmandmsensitive mdata
DmUsingmAESm256zencryptionzformcommunicationsmofmamsensitive mnature m-mANSWER-B
Whichmphase mofmthe msoftware mdevelopmentzlifemcycle m(SDL/SDLC)mwouldmbemusedmtomdetermine mthem
minimmummsetmofmprivilegeszrequiredmtomperformmthemtargetedmtaskmandmrestrictmthemusermtomamdomai
nmwithmthosme zprivileges?
AzDesign
BmDeploy
CmDevelopment
DmImplementationm-mANSWER-A
Whichmleastmprivilegemmethodmiszmoremgranularminmscope mandmgrantsmspecificmprocesseszonlymthe mprivi
lege msznecessarymtomperformmcertainmrequiredmfunctions,minsteadmofmgrantingmthemmunrestrictedmacces
sztomthe msmystem?
AmEntitlementmprivilege
BzSeparationzofzprivilege
CmAggregationmofmprivileges
DmSegregationmofmresponsibilitiesm- mANSWER-B
Whymdoesmprivilege mcreepmpose zampotential msecuritymrisk?
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
AmUsermprivilegesmdomnotmmatchmtheirmjobmrole.
BmWithmmore zprivileges,mthere maremmore mresponsibilities.
CmAuditingzwillmshowmammismatchmbetweenmindividualmresponsibilitiesmandmtheirmaccessmrights.
DzUserszhavezmore zprivilegeszthanztheyzneedzandzmayzperformzactionszoutside ztheirzjobzdescription.z-
ANSWER-D
Amsystemmdevelopermismimplementingzamnewmsalesmsystem.mThemsystemmdevelopermismconcernedmthatmunautm
horizedmindividualsmmaymbe mable mtomviewmsensitive mcustomermfinancialmdata.
Whichmfamilymofmnonfunctional mrequirementsmshouldmbe mconsideredmaszpartzofmthe macceptance mcriteria?
AmIntegrity
BmAvailability
CmNonrepudition
DzConfidentialityz-zANSWER-D
Amprojectmmanagermismgivenmthe mtaskmtomcome zupmwithmnonfunctionalmacceptance mcriteriamrequiremen
tsmfomrmbusinessmownersmasmpartmofmamprojectmdelivery.
Whichmnonfunctional mrequirementmshouldmbe mappliedmtomthe macceptance mcriteria?
AmGive msearchmoptionsmtozusers
BzEvaluate ztestzexecutionzresults
CmDivide musersmintomgroupsmandmgive mthemmseparate mrights
DmDevelopzsoftware mthatzkeepsmdownwardmcompatibilitymintactm-mANSWER-B
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
Whatmismamstepmformconstructingmamthreatzmodelmformamprojectmwhenmusingmpracticalmriskzanalysis?
AmAlignmyourmbusinessmgoals
BmApplymengineeringmmethods
CmEstimate mprobabilitymofmprojectmtime
DzMakezazlistzofzwhatzyouzare ztryingztozprotectz-m ANSWER-
Whichmcybermthreatszare mtypicallymsurgicalmbymnature,mhavemhighlymspecificmtargeting,mandmaremtechnolo
gicalmlymsophisticated?
AzTacticalzattacks
BmCriminalmattacks
CmStrategicmattacks
DmUser-specificmattacksz-mANSWER-A
Whichmtype mofmcyberattacksmare moftenmintendedmtomelevate mawarenessmofmamtopic?
AmCyberwarfare
BmTacticalmattacks
CmUser-specificmattacks
DzSociopolitical zattacksz-m ANSWER-D
Whatmtype mofmattackmlocksmamuser'smdesktopmandmthenmrequiresmampaymentmtomunlockmit?
AmPhishing
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
BmKeylogger
CzRansomware
DmDenial-of-service m-mANSWER-C
Whatmismamcountermeasure magainstmvariousmformsmofmXMLmandmXMLmpathminjectionmattacks?
AmXMLmname zwrapping
BmXMLzunicode mencoding
CzXMLzattribute zescaping
DmXMLzdistinguishedmname mescapingm-mANSWER-C
Whichmcountermeasure mismusedmtommitigate mSQLminjectionmattacks?
AmSQLzFirewall
BmProjectedmbijection
CzQueryzparameterization
DmProgressive mColdFusionm-mANSWER-C
Whatmismanmappropriate mcountermeasure mtozanmescalationmofmprivilege mattack?
AmEnforcingzstrongmpasswordmpolicies
BmUsingmstandardmencryptionmalgorithmsmandmcorrectmkeymsizes
CmEnablingzthe mauditingmandmloggingzofmallmadministrationmactivities
DzRestrictingzaccessztozspecificzoperationszthroughzrole-basedzaccesszcontrolsz-zANSWER-D
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
Whichconfigurationmmanagementmsecuritymcountermeasure mimplementsmleastmprivilege maccessmcontrol?
AmFollowingmstrongmpasswordmpoliciesmtomrestrictmaccess
BzRestrictingzfilezaccessztozuserszbasedzonzauthorization
CmAvoidingmclearmtextmformatmformcredentialsmandmsensitive mdata
DmUsingmAESm256zencryptionzformcommunicationsmofmamsensitive mnature m-mANSWER-B
Whichmphase mofmthe msoftware mdevelopmentzlifemcycle m(SDL/SDLC)mwouldmbemusedmtomdetermine mthem
minimmummsetmofmprivilegeszrequiredmtomperformmthemtargetedmtaskmandmrestrictmthemusermtomamdomai
nmwithmthosme zprivileges?
AzDesign
BmDeploy
CmDevelopment
DmImplementationm-mANSWER-A
Whichmleastmprivilegemmethodmiszmoremgranularminmscope mandmgrantsmspecificmprocesseszonlymthe mprivi
lege msznecessarymtomperformmcertainmrequiredmfunctions,minsteadmofmgrantingmthemmunrestrictedmacces
sztomthe msmystem?
AmEntitlementmprivilege
BzSeparationzofzprivilege
CmAggregationmofmprivileges
DmSegregationmofmresponsibilitiesm- mANSWER-B
Whymdoesmprivilege mcreepmpose zampotential msecuritymrisk?
, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2024ACTUALEXAM400QUESTIONSA
NDCORRECTDETAILEDANSWERS WITH RATIONALES (VERIF m m m m
IEDANSWERS) |ALREADYGRADED A+ m m
AmUsermprivilegesmdomnotmmatchmtheirmjobmrole.
BmWithmmore zprivileges,mthere maremmore mresponsibilities.
CmAuditingzwillmshowmammismatchmbetweenmindividualmresponsibilitiesmandmtheirmaccessmrights.
DzUserszhavezmore zprivilegeszthanztheyzneedzandzmayzperformzactionszoutside ztheirzjobzdescription.z-
ANSWER-D
Amsystemmdevelopermismimplementingzamnewmsalesmsystem.mThemsystemmdevelopermismconcernedmthatmunautm
horizedmindividualsmmaymbe mable mtomviewmsensitive mcustomermfinancialmdata.
Whichmfamilymofmnonfunctional mrequirementsmshouldmbe mconsideredmaszpartzofmthe macceptance mcriteria?
AmIntegrity
BmAvailability
CmNonrepudition
DzConfidentialityz-zANSWER-D
Amprojectmmanagermismgivenmthe mtaskmtomcome zupmwithmnonfunctionalmacceptance mcriteriamrequiremen
tsmfomrmbusinessmownersmasmpartmofmamprojectmdelivery.
Whichmnonfunctional mrequirementmshouldmbe mappliedmtomthe macceptance mcriteria?
AmGive msearchmoptionsmtozusers
BzEvaluate ztestzexecutionzresults
CmDivide musersmintomgroupsmandmgive mthemmseparate mrights
DmDevelopzsoftware mthatzkeepsmdownwardmcompatibilitymintactm-mANSWER-B
