WGU D487 SECURE SOFTWARE DESIGN
EXAM SCRIPT PREMIUM REVIEW SHEET
TESTED QUESTIONS AND ANSWERS
●● Principle of least privilege
Answer: Users, services, and processes receive only the minimum
permissions required to perform duties.
●● Fail-safe / fail-closed
Answer: Design principle where systems default to a secure state when
failures occur.
●● Open design
Answer: Security principle stating that protection should not depend on
keeping the design secret.
●● Separation of duties
Answer: Dividing critical tasks among multiple people to reduce fraud,
error, and abuse.
●● Waterfall methodology
Answer: Linear, sequential development approach best suited for stable
requirements and fixed scope.
, ●● Agile methodology
Answer: Iterative development approach valuing flexibility, customer
feedback, and responding to change.
●● Scrum
Answer: Agile framework organizing work into fixed-length sprints with
defined roles and events.
●● Extreme Programming (XP)
Answer: Agile method focused on engineering practices like pair
programming and continuous integration.
●● Sprint planning
Answer: Scrum event to select sprint work and decide how to approach
it.
●● Daily scrum
Answer: Scrum event where the team briefly coordinates progress,
plans, and blockers.
●● Sprint review
Answer: Scrum event used to inspect completed work with stakeholders
and gather feedback.
EXAM SCRIPT PREMIUM REVIEW SHEET
TESTED QUESTIONS AND ANSWERS
●● Principle of least privilege
Answer: Users, services, and processes receive only the minimum
permissions required to perform duties.
●● Fail-safe / fail-closed
Answer: Design principle where systems default to a secure state when
failures occur.
●● Open design
Answer: Security principle stating that protection should not depend on
keeping the design secret.
●● Separation of duties
Answer: Dividing critical tasks among multiple people to reduce fraud,
error, and abuse.
●● Waterfall methodology
Answer: Linear, sequential development approach best suited for stable
requirements and fixed scope.
, ●● Agile methodology
Answer: Iterative development approach valuing flexibility, customer
feedback, and responding to change.
●● Scrum
Answer: Agile framework organizing work into fixed-length sprints with
defined roles and events.
●● Extreme Programming (XP)
Answer: Agile method focused on engineering practices like pair
programming and continuous integration.
●● Sprint planning
Answer: Scrum event to select sprint work and decide how to approach
it.
●● Daily scrum
Answer: Scrum event where the team briefly coordinates progress,
plans, and blockers.
●● Sprint review
Answer: Scrum event used to inspect completed work with stakeholders
and gather feedback.
