WGU D487 - SECURE SOFTWARE DESIGN EXAM
WITH QUESTIONS AND CORRECT ANSWERS ||
LATEST UPDATE 2024/2025
Building Security In Maturity Model (BSIMM) - ...(ANSWERS)....A study of real-
world software security initiatives organized so that you can determine where
you stand with your software security initiative and how to evolve your efforts
over time
SAMM - ...(ANSWERS)....offers a roadmap and a well-defined maturity model for
secure software development and deployment, along with useful tools for self-
assessment and planning.
Core OpenSAMM activities - ...(ANSWERS)....Governance
Construction
Verification
Deployment
static analysis - ...(ANSWERS)....Source code of an application is reviewed
manually or with automatic tools without running the code
dynamic analysis - ...(ANSWERS)....Analysis and testing of a program occurs while
it is being executed or run
, Fuzzing - ...(ANSWERS)....Injection of randomized data into a software program in
an attempt to find system failures, memory leaks, error handling issues, and
improper input validation
OWASP ZAP - ...(ANSWERS)....-Open-source web application security scanner-Can
be used as a proxy to manipulate traffic running through it (even https)
ISO/IEC 27001 - ...(ANSWERS)....Specifies requirements for establishing,
implementing, operating, monitoring, reviewing, maintaining and improving a
documented information security management system
ISO/IEC 17799 - ...(ANSWERS)....ISO/EIC is a joint committee that develops and
maintains standards in the IT industry. 17799 is an international code of practice
for information security management. This section defines confidentiality,
integrity and availability controls.
ISO/IEC 27034 - ...(ANSWERS)....A standard that provides guidance to help
organizations embed security within their processes that help secure applications
running in the environment, including application lifecycle processes
Software security champion - ...(ANSWERS)....a developer with an interest in
security who helps amplify the security message at the team level
waterfall methodology - ...(ANSWERS)....a sequential, activity-based process in
which each phase in the SDLC is performed sequentially from planning through
implementation and maintenance
WITH QUESTIONS AND CORRECT ANSWERS ||
LATEST UPDATE 2024/2025
Building Security In Maturity Model (BSIMM) - ...(ANSWERS)....A study of real-
world software security initiatives organized so that you can determine where
you stand with your software security initiative and how to evolve your efforts
over time
SAMM - ...(ANSWERS)....offers a roadmap and a well-defined maturity model for
secure software development and deployment, along with useful tools for self-
assessment and planning.
Core OpenSAMM activities - ...(ANSWERS)....Governance
Construction
Verification
Deployment
static analysis - ...(ANSWERS)....Source code of an application is reviewed
manually or with automatic tools without running the code
dynamic analysis - ...(ANSWERS)....Analysis and testing of a program occurs while
it is being executed or run
, Fuzzing - ...(ANSWERS)....Injection of randomized data into a software program in
an attempt to find system failures, memory leaks, error handling issues, and
improper input validation
OWASP ZAP - ...(ANSWERS)....-Open-source web application security scanner-Can
be used as a proxy to manipulate traffic running through it (even https)
ISO/IEC 27001 - ...(ANSWERS)....Specifies requirements for establishing,
implementing, operating, monitoring, reviewing, maintaining and improving a
documented information security management system
ISO/IEC 17799 - ...(ANSWERS)....ISO/EIC is a joint committee that develops and
maintains standards in the IT industry. 17799 is an international code of practice
for information security management. This section defines confidentiality,
integrity and availability controls.
ISO/IEC 27034 - ...(ANSWERS)....A standard that provides guidance to help
organizations embed security within their processes that help secure applications
running in the environment, including application lifecycle processes
Software security champion - ...(ANSWERS)....a developer with an interest in
security who helps amplify the security message at the team level
waterfall methodology - ...(ANSWERS)....a sequential, activity-based process in
which each phase in the SDLC is performed sequentially from planning through
implementation and maintenance
