D487 Exam with Question and Correct
Answers 2025
What ,is ,a ,study ,of ,real-world ,software ,security ,initiatives ,organized ,so
,companies ,can ,measure ,their ,initiatives ,and ,understand ,how ,to ,evolve ,them
,over ,time? ,- ,CORRECT ,ANSWER-Building ,Security ,In ,Maturity ,Model ,(BSIMM)
Which ,secure ,coding ,best ,practice ,says ,to ,use ,parameterized ,queries,
,encrypted ,connection ,strings ,stored ,in ,separate ,configuration ,files, ,and ,strong
,passwords ,or ,multi-factor ,authentication? ,- ,CORRECT ,ANSWER-Database
,security
The ,software ,security ,team ,is ,currently ,working ,to ,identify ,approaches ,for ,input
,validation, ,authentication, ,authorization, ,and ,configuration ,management ,of ,a
,new ,software ,product ,so ,they ,can ,deliver ,a ,security ,profile. ,Which ,threat
,modeling ,step ,is ,being ,described? ,- ,CORRECT ,ANSWER-Analyzing ,the ,target
Team ,members ,are ,being ,introduced ,during ,sprint ,zero ,in ,the ,project ,kickoff
,meeting. ,The ,person ,being ,introduced ,is ,a ,member ,of ,the ,scrum ,team,
,responsible ,for ,writing ,feature ,logic ,and ,attending ,sprint ,ceremonies. ,Which
,role ,is ,the ,team ,member ,playing? ,- ,CORRECT ,ANSWER-Software ,developer
Which ,mitigation ,technique ,can ,be ,used ,to ,fight ,against ,a ,data ,tampering
,threat? ,- ,CORRECT ,ANSWER-Digital ,signatures
What ,is ,a ,countermeasure ,to ,the ,web ,application ,security ,frame ,(ASF)
,configuration ,management ,threat ,category? ,- ,CORRECT ,ANSWER-Service
,accounts ,have ,no ,administration ,capabilities.
Which ,type ,of ,requirement ,specifies ,that ,credit ,card ,numbers ,displayed ,in ,the
,application ,will ,be ,masked ,so ,they ,only ,show ,the ,last ,four ,digits? ,- ,CORRECT
,ANSWER-Privacy ,requirement
Which ,type ,of ,requirement ,specifies ,that ,credit ,card ,numbers ,are ,designated ,as
,highly ,sensitive ,confidential ,personal ,information? ,- ,CORRECT ,ANSWER-Data
,classification ,requirement
Answers 2025
What ,is ,a ,study ,of ,real-world ,software ,security ,initiatives ,organized ,so
,companies ,can ,measure ,their ,initiatives ,and ,understand ,how ,to ,evolve ,them
,over ,time? ,- ,CORRECT ,ANSWER-Building ,Security ,In ,Maturity ,Model ,(BSIMM)
Which ,secure ,coding ,best ,practice ,says ,to ,use ,parameterized ,queries,
,encrypted ,connection ,strings ,stored ,in ,separate ,configuration ,files, ,and ,strong
,passwords ,or ,multi-factor ,authentication? ,- ,CORRECT ,ANSWER-Database
,security
The ,software ,security ,team ,is ,currently ,working ,to ,identify ,approaches ,for ,input
,validation, ,authentication, ,authorization, ,and ,configuration ,management ,of ,a
,new ,software ,product ,so ,they ,can ,deliver ,a ,security ,profile. ,Which ,threat
,modeling ,step ,is ,being ,described? ,- ,CORRECT ,ANSWER-Analyzing ,the ,target
Team ,members ,are ,being ,introduced ,during ,sprint ,zero ,in ,the ,project ,kickoff
,meeting. ,The ,person ,being ,introduced ,is ,a ,member ,of ,the ,scrum ,team,
,responsible ,for ,writing ,feature ,logic ,and ,attending ,sprint ,ceremonies. ,Which
,role ,is ,the ,team ,member ,playing? ,- ,CORRECT ,ANSWER-Software ,developer
Which ,mitigation ,technique ,can ,be ,used ,to ,fight ,against ,a ,data ,tampering
,threat? ,- ,CORRECT ,ANSWER-Digital ,signatures
What ,is ,a ,countermeasure ,to ,the ,web ,application ,security ,frame ,(ASF)
,configuration ,management ,threat ,category? ,- ,CORRECT ,ANSWER-Service
,accounts ,have ,no ,administration ,capabilities.
Which ,type ,of ,requirement ,specifies ,that ,credit ,card ,numbers ,displayed ,in ,the
,application ,will ,be ,masked ,so ,they ,only ,show ,the ,last ,four ,digits? ,- ,CORRECT
,ANSWER-Privacy ,requirement
Which ,type ,of ,requirement ,specifies ,that ,credit ,card ,numbers ,are ,designated ,as
,highly ,sensitive ,confidential ,personal ,information? ,- ,CORRECT ,ANSWER-Data
,classification ,requirement
