WGU D487 SECURE SW DESIGN
OBJECTIVE ASSESSMENT ACTUAL EXAM
2026/2027 COMPLETE 340+ QUESTIONS
WITH VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS NEWEST
VERSION
1. Which International Organization for Standardization (ISO) standard is the
benchmark for information security today? - ANSWER ISO/IEC 27001.
2. What is the analysis of computer software that is performed by executing
programs on a real or virtual processor in real time?, - ANSWER Dynamic
analysis
3. Which person is responsible for designing, planning, and implementing
secure coding practices and security testing methodologies? - ANSWER
Software security architect
4. A company is preparing to add a new feature to its flagship software
product. The new feature is similar to features that have been added in
previous years, and the requirements are well-documented. The project is
expected to last three to four months, at which time the new feature will be
released to customers. Project team members will focus solely on the new
feature until the project ends. Which software development methodology is
being used? - ANSWER Waterfall
,5. A new product will require an administration section for a small number of
users. Normal users will be able to view limited customer information and
should not see admin functionality within the application. Which concept is
being used? - ANSWER Principle of least privilege
6. The scrum team is attending their morning meeting, which is scheduled at
the beginning of the work day. Each team member reports what they
accomplished yesterday, what they plan to accomplish today, and if they
have any impediments that may cause them to miss their delivery deadline.
Which scrum ceremony is the team participating in? - ANSWER Daily
Scrum
7. What is a list of information security vulnerabilities that aims to provide
names for publicly known problems? - ANSWER Common computer
vulnerabilities and exposures (CVE)
8. Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access? - ANSWER
Cryptographic practices
9. Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access? - ANSWER
Cryptographic practices
10.Which secure coding best practice ensures servers, frameworks, and system
components are all running the latest approved versions? - ANSWER
System configuration
11.Which secure coding best practice says to use parameterized queries,
encrypted connection strings stored in separate configuration files, and
, strong passwords or multi-factor authentication? - ANSWER Database
security
12.Which secure coding best practice says that all information passed to other
systems should be encrypted? - ANSWER Communication security
13.eam members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced is a member of the scrum team,
responsible for writing feature logic and attending sprint ceremonies. Which
role is the team member playing? - ANSWER Software developer
14.A software security team member has created data flow diagrams, chosen
the STRIDE methodology to perform threat reviews, and created the security
assessment for the new product. Which category of secure software best
practices did the team member perform? - ANSWER Architecture analysis
15.Team members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced will be a facilitator, will try to remove
roadblocks and ensure the team is communicating freely, and will be
responsible for facilitating all scrum ceremonies. Which role is the team
member playing? - ANSWER Scrum master
16.The new product standards state that all traffic must be secure and
encrypted. What is the name for this secure coding practice? - ANSWER
Communication security
17.Which DREAD category is based on how easily a threat exploit can be
repeated? - ANSWER Reproducibility
, 18.Which mitigation technique can be used to fight against a data tampering
threat? - ANSWER Digital signatures
19.What is a countermeasure to the web application security frame (ASF)
configuration management threat category? - ANSWER Compliance
requirement
20.Which type of requirement specifies that file formats the application sends to
financial institutions must be certified every four years? - ANSWER
Compliance requirement
21.Which type of requirement specifies that credit card numbers displayed in
the application will be masked so they only show the last four digits? -
ANSWER Privacy requirement
22.Which type of requirement specifies that user passwords will require a
minimum of 8 characters and must include at least one uppercase character,
one number, and one special character? - ANSWER Security requirement
23.Which type of requirement specifies that credit card numbers are designated
as highly sensitive confidential personal information? - ANSWER Data
classification requirement
24.Which privacy impact statement requirement type defines how personal
information is protected on devices used by more than a single associate? -
ANSWER Privacy control requirements
25.In which step of the PASTA threat modeling methodology does design flaw
analysis take place? - ANSWER Vulnerability and weakness analysis
OBJECTIVE ASSESSMENT ACTUAL EXAM
2026/2027 COMPLETE 340+ QUESTIONS
WITH VERIFIED CORRECT ANSWERS ||
100% GUARANTEED PASS NEWEST
VERSION
1. Which International Organization for Standardization (ISO) standard is the
benchmark for information security today? - ANSWER ISO/IEC 27001.
2. What is the analysis of computer software that is performed by executing
programs on a real or virtual processor in real time?, - ANSWER Dynamic
analysis
3. Which person is responsible for designing, planning, and implementing
secure coding practices and security testing methodologies? - ANSWER
Software security architect
4. A company is preparing to add a new feature to its flagship software
product. The new feature is similar to features that have been added in
previous years, and the requirements are well-documented. The project is
expected to last three to four months, at which time the new feature will be
released to customers. Project team members will focus solely on the new
feature until the project ends. Which software development methodology is
being used? - ANSWER Waterfall
,5. A new product will require an administration section for a small number of
users. Normal users will be able to view limited customer information and
should not see admin functionality within the application. Which concept is
being used? - ANSWER Principle of least privilege
6. The scrum team is attending their morning meeting, which is scheduled at
the beginning of the work day. Each team member reports what they
accomplished yesterday, what they plan to accomplish today, and if they
have any impediments that may cause them to miss their delivery deadline.
Which scrum ceremony is the team participating in? - ANSWER Daily
Scrum
7. What is a list of information security vulnerabilities that aims to provide
names for publicly known problems? - ANSWER Common computer
vulnerabilities and exposures (CVE)
8. Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access? - ANSWER
Cryptographic practices
9. Which secure coding best practice uses well-tested, publicly available
algorithms to hide product data from unauthorized access? - ANSWER
Cryptographic practices
10.Which secure coding best practice ensures servers, frameworks, and system
components are all running the latest approved versions? - ANSWER
System configuration
11.Which secure coding best practice says to use parameterized queries,
encrypted connection strings stored in separate configuration files, and
, strong passwords or multi-factor authentication? - ANSWER Database
security
12.Which secure coding best practice says that all information passed to other
systems should be encrypted? - ANSWER Communication security
13.eam members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced is a member of the scrum team,
responsible for writing feature logic and attending sprint ceremonies. Which
role is the team member playing? - ANSWER Software developer
14.A software security team member has created data flow diagrams, chosen
the STRIDE methodology to perform threat reviews, and created the security
assessment for the new product. Which category of secure software best
practices did the team member perform? - ANSWER Architecture analysis
15.Team members are being introduced during sprint zero in the project kickoff
meeting. The person being introduced will be a facilitator, will try to remove
roadblocks and ensure the team is communicating freely, and will be
responsible for facilitating all scrum ceremonies. Which role is the team
member playing? - ANSWER Scrum master
16.The new product standards state that all traffic must be secure and
encrypted. What is the name for this secure coding practice? - ANSWER
Communication security
17.Which DREAD category is based on how easily a threat exploit can be
repeated? - ANSWER Reproducibility
, 18.Which mitigation technique can be used to fight against a data tampering
threat? - ANSWER Digital signatures
19.What is a countermeasure to the web application security frame (ASF)
configuration management threat category? - ANSWER Compliance
requirement
20.Which type of requirement specifies that file formats the application sends to
financial institutions must be certified every four years? - ANSWER
Compliance requirement
21.Which type of requirement specifies that credit card numbers displayed in
the application will be masked so they only show the last four digits? -
ANSWER Privacy requirement
22.Which type of requirement specifies that user passwords will require a
minimum of 8 characters and must include at least one uppercase character,
one number, and one special character? - ANSWER Security requirement
23.Which type of requirement specifies that credit card numbers are designated
as highly sensitive confidential personal information? - ANSWER Data
classification requirement
24.Which privacy impact statement requirement type defines how personal
information is protected on devices used by more than a single associate? -
ANSWER Privacy control requirements
25.In which step of the PASTA threat modeling methodology does design flaw
analysis take place? - ANSWER Vulnerability and weakness analysis
