WGU - D487 Comprehensive Test Bank Final Exam
2026-2027 Complete Questions & Accurate Detailed
Answers\ Actual Final Exam Preparation || Latest
Update
Why are Data Flow Diagrams (DFDs) critical in the threat modeling
process?
They provide a visual representation of how data moves through the
software solution, clarifying the underlying architecture and processes.
By focusing on data flow (not just code flow), DFDs help identify
potential vulnerabilities at each step of data handling.
What are the key steps involved in threat modeling?
Break down product architecture using data flow diagrams (DFDs). Use
STRIDE threat categories to identify applicable threats for each DFD
element.
Map threats with relevant vulnerabilities based on usage scenarios.
Rank threats by assigning a risk rating (e.g., using DREAD). Define
mitigation plans or countermeasures for identified vulnerabilities.
Fix unacceptable vulnerabilities in priority order based on the risk
ranking.
,What are the key elements of a Data Flow Diagram (DFD) and their
symbols?
External Element (Rectangle) – Represents an external system/user
interacting with the application.
Process (Circle) – Handles data operations or transforms input into
output.
Multiple Processes (Double Circle) – Represents a collection of sub-
processes functioning together.
Data Store (Two Parallel Lines) – Stores data without modification.
Data Flow (Arrow) – Represents movement and direction of data
between elements.
Trust Boundary (Dashed Curve) – Marks security boundaries where
privilege levels change between components.
What are the key security areas to consider after completing a Data
Flow Diagram (DFD)?
Input validation
Authentication
Authorization
Configuration management
Sensitive data protection
Session management
Cryptography
Exception management
Parameter manipulation
Audit and logging
,Why is input validation critical in software security?
All user input should be considered untrusted and must be validated
before being used to prevent injection attacks and other exploits.
What is the purpose of authentication in security design?
Authentication ensures that users, systems, APIs, or components are
legitimate before granting access to services or functionality.
, What is the purpose of authorization in security?
Authorization ensures that only specific users, systems, or APIs can
perform certain operations, preventing unauthorized access.
What is the role of configuration management in security?
It hardens software, systems, and devices, locking them down to
reduce risks.
What are key components of configuration management?
Hardening standards and guidelines
Reviewing application dependencies
Securing user & administrator interfaces
Managing security changes effectively
How should an organization remediate databases installed with default
security settings?
✔ Ensure default accounts and passwords are disabled or removed to
prevent unauthorized access.
✔ Enforce strong authentication and role-based access controls
(RBAC).
✔ Regularly review and harden database security settings.
2026-2027 Complete Questions & Accurate Detailed
Answers\ Actual Final Exam Preparation || Latest
Update
Why are Data Flow Diagrams (DFDs) critical in the threat modeling
process?
They provide a visual representation of how data moves through the
software solution, clarifying the underlying architecture and processes.
By focusing on data flow (not just code flow), DFDs help identify
potential vulnerabilities at each step of data handling.
What are the key steps involved in threat modeling?
Break down product architecture using data flow diagrams (DFDs). Use
STRIDE threat categories to identify applicable threats for each DFD
element.
Map threats with relevant vulnerabilities based on usage scenarios.
Rank threats by assigning a risk rating (e.g., using DREAD). Define
mitigation plans or countermeasures for identified vulnerabilities.
Fix unacceptable vulnerabilities in priority order based on the risk
ranking.
,What are the key elements of a Data Flow Diagram (DFD) and their
symbols?
External Element (Rectangle) – Represents an external system/user
interacting with the application.
Process (Circle) – Handles data operations or transforms input into
output.
Multiple Processes (Double Circle) – Represents a collection of sub-
processes functioning together.
Data Store (Two Parallel Lines) – Stores data without modification.
Data Flow (Arrow) – Represents movement and direction of data
between elements.
Trust Boundary (Dashed Curve) – Marks security boundaries where
privilege levels change between components.
What are the key security areas to consider after completing a Data
Flow Diagram (DFD)?
Input validation
Authentication
Authorization
Configuration management
Sensitive data protection
Session management
Cryptography
Exception management
Parameter manipulation
Audit and logging
,Why is input validation critical in software security?
All user input should be considered untrusted and must be validated
before being used to prevent injection attacks and other exploits.
What is the purpose of authentication in security design?
Authentication ensures that users, systems, APIs, or components are
legitimate before granting access to services or functionality.
, What is the purpose of authorization in security?
Authorization ensures that only specific users, systems, or APIs can
perform certain operations, preventing unauthorized access.
What is the role of configuration management in security?
It hardens software, systems, and devices, locking them down to
reduce risks.
What are key components of configuration management?
Hardening standards and guidelines
Reviewing application dependencies
Securing user & administrator interfaces
Managing security changes effectively
How should an organization remediate databases installed with default
security settings?
✔ Ensure default accounts and passwords are disabled or removed to
prevent unauthorized access.
✔ Enforce strong authentication and role-based access controls
(RBAC).
✔ Regularly review and harden database security settings.
