WGU MASTER'S COURSE C706 - SECURE SOFTWARE
DESIGN EXAM LATEST UPDATE 2026-2027 ACTUAL EXAM
400 QUESTIONS AND CORRECT DETAILED ANSWERS
WITH RATIONALES (VERIFIED ANSWERS) |ALREADY
GRADED A+
WhatAisAaAstepAforAconstructingAaAthreatAmodelAforAaAprojectAwhenAusingApracticalAriskAanalysis?
AAAlignAyourAbusinessAgoals BAApplyAengineeringAmethods
CAEstimateAprobabilityAofAprojectAtime
DAMakeAaAlistAofAwhatAyouAareAtryingAtoAprotectA AANSWER D
WhichAcyberAthreatsAareAtypicallyAsurgicalAbyAnature,AhaveAhighlyAspecificAtargeting,AandAareAtechnologi
callyAsophisticated?
AATacticalAattacks BACriminalAattacks
CAStrategicAattacks
DAUser specificAattacksA AANSWER A
WhichAtypeAofAcyberattacksAareAoftenAintendedAtoAelevateAawarenessAofAaAtopic?
AACyberwarfare BATacticalAattacks
CAUser specificAattacks
DASociopoliticalAattacksA AANSWER D
WhatAtypeAofAattackAlocksAaAuser'sAdesktopAandAthenArequiresAaApaymentAtoAunlockAit?
AAPhishing
,WGU MASTER'S COURSE C706 - SECURE SOFTWARE
DESIGN EXAM LATEST UPDATE 2026-2027 ACTUAL EXAM
400 QUESTIONS AND CORRECT DETAILED ANSWERS
WITH RATIONALES (VERIFIED ANSWERS) |ALREADY
GRADED A+
BAKeylogger CARansomware
DADenial of serviceA AANSWER C
,WhatAisAaAcountermeasureAagainstAvariousAformsAofAXMLAandAXMLApathAinjectionAattacks?
AAXMLAnameAwrapping BAXMLAunicodeAencoding
CAXMLAattributeAescaping
DAXMLAdistinguishedAnameAescapingA AANSWER C
WhichAcountermeasureAisAusedAtoAmitigateASQLAinjectionAattacks?
AASQLAFirewall BAProjectedAbijection
CAQueryAparameterization
DAProgressiveAColdFusionA AANSWER C
WhatAisAanAappropriateAcountermeasureAtoAanAescalationAofAprivilegeAattack?
AAEnforcingAstrongApasswordApolicies
BAUsingAstandardAencryptionAalgorithmsAandAcorrectAkeyAsizes
CAEnablingAtheAauditingAandAloggingAofAallAadministrationAactivities
DARestrictingAaccessAtoAspecificAoperationsAthroughArole basedAaccessAcontrolsA AANSWER D
WhichAconfigurationAmanagementAsecurityAcountermeasureAimplementsAleastAprivilegeAaccessAcontrol
?
AAFollowingAstrongApasswordApoliciesAtoArestrictAaccess
BARestrictingAfileAaccessAtoAusersAbasedAonAauthorization
CAAvoidingAclearAtextAformatAforAcredentialsAandAsensitiveAdata
DAUsingAAESA256AencryptionAforAcommunicationsAofAaAsensitiveAnatureA AANSWER B
, WhichAphaseAofAtheAsoftwareAdevelopmentAlifeAcycleA(SDL/SDLC)AwouldAbeAusedAtoAdetermineAtheAmini
mumAsetAofAprivilegesArequiredAtoAperformAtheAtargetedAtaskAandArestrictAtheAuserAtoAaAdomainAwithAt
hoseAprivileges?
AADesign BADeploy
CADevelopment
DAImplementationA AANSWER A
WhichAleastAprivilegeAmethodAisAmoreAgranularAinAscopeAandAgrantsAspecificAprocessesAonlyAtheAprivileg
esAnecessaryAtoAperformAcertainArequiredAfunctions,AinsteadAofAgrantingAthemAunrestrictedAaccessAtoAt
heAsystem?
AAEntitlementAprivilege BASeparationAofAprivilege
CAAggregationAofAprivileges
DASegregationAofAresponsibilitiesA AANSWER B
WhyAdoesAprivilegeAcreepAposeAaApotentialAsecurityArisk?
AAUserAprivilegesAdoAnotAmatchAtheirAjobArole.
BAWithAmoreAprivileges,AthereAareAmoreAresponsibilities.
CAAuditingAwillAshowAaAmismatchAbetweenAindividualAresponsibilitiesAandAtheirAaccessArights.
DAUsersAhaveAmoreAprivilegesAthanAtheyAneedAandAmayAperformAactionsAoutsideAtheirAjobAdescription.A
AANSWER D
AAsystemAdeveloperAisAimplementingAaAnewAsalesAsystem.ATheAsystemAdeveloperAisAconcernedAthatAuna
uthorizedAindividualsAmayAbeAableAtoAviewAsensitiveAcustomerAfinancialAdata.
WhichAfamilyAofAnonfunctionalArequirementsAshouldAbeAconsideredAasApartAofAtheAacceptanceAcriteria?
DESIGN EXAM LATEST UPDATE 2026-2027 ACTUAL EXAM
400 QUESTIONS AND CORRECT DETAILED ANSWERS
WITH RATIONALES (VERIFIED ANSWERS) |ALREADY
GRADED A+
WhatAisAaAstepAforAconstructingAaAthreatAmodelAforAaAprojectAwhenAusingApracticalAriskAanalysis?
AAAlignAyourAbusinessAgoals BAApplyAengineeringAmethods
CAEstimateAprobabilityAofAprojectAtime
DAMakeAaAlistAofAwhatAyouAareAtryingAtoAprotectA AANSWER D
WhichAcyberAthreatsAareAtypicallyAsurgicalAbyAnature,AhaveAhighlyAspecificAtargeting,AandAareAtechnologi
callyAsophisticated?
AATacticalAattacks BACriminalAattacks
CAStrategicAattacks
DAUser specificAattacksA AANSWER A
WhichAtypeAofAcyberattacksAareAoftenAintendedAtoAelevateAawarenessAofAaAtopic?
AACyberwarfare BATacticalAattacks
CAUser specificAattacks
DASociopoliticalAattacksA AANSWER D
WhatAtypeAofAattackAlocksAaAuser'sAdesktopAandAthenArequiresAaApaymentAtoAunlockAit?
AAPhishing
,WGU MASTER'S COURSE C706 - SECURE SOFTWARE
DESIGN EXAM LATEST UPDATE 2026-2027 ACTUAL EXAM
400 QUESTIONS AND CORRECT DETAILED ANSWERS
WITH RATIONALES (VERIFIED ANSWERS) |ALREADY
GRADED A+
BAKeylogger CARansomware
DADenial of serviceA AANSWER C
,WhatAisAaAcountermeasureAagainstAvariousAformsAofAXMLAandAXMLApathAinjectionAattacks?
AAXMLAnameAwrapping BAXMLAunicodeAencoding
CAXMLAattributeAescaping
DAXMLAdistinguishedAnameAescapingA AANSWER C
WhichAcountermeasureAisAusedAtoAmitigateASQLAinjectionAattacks?
AASQLAFirewall BAProjectedAbijection
CAQueryAparameterization
DAProgressiveAColdFusionA AANSWER C
WhatAisAanAappropriateAcountermeasureAtoAanAescalationAofAprivilegeAattack?
AAEnforcingAstrongApasswordApolicies
BAUsingAstandardAencryptionAalgorithmsAandAcorrectAkeyAsizes
CAEnablingAtheAauditingAandAloggingAofAallAadministrationAactivities
DARestrictingAaccessAtoAspecificAoperationsAthroughArole basedAaccessAcontrolsA AANSWER D
WhichAconfigurationAmanagementAsecurityAcountermeasureAimplementsAleastAprivilegeAaccessAcontrol
?
AAFollowingAstrongApasswordApoliciesAtoArestrictAaccess
BARestrictingAfileAaccessAtoAusersAbasedAonAauthorization
CAAvoidingAclearAtextAformatAforAcredentialsAandAsensitiveAdata
DAUsingAAESA256AencryptionAforAcommunicationsAofAaAsensitiveAnatureA AANSWER B
, WhichAphaseAofAtheAsoftwareAdevelopmentAlifeAcycleA(SDL/SDLC)AwouldAbeAusedAtoAdetermineAtheAmini
mumAsetAofAprivilegesArequiredAtoAperformAtheAtargetedAtaskAandArestrictAtheAuserAtoAaAdomainAwithAt
hoseAprivileges?
AADesign BADeploy
CADevelopment
DAImplementationA AANSWER A
WhichAleastAprivilegeAmethodAisAmoreAgranularAinAscopeAandAgrantsAspecificAprocessesAonlyAtheAprivileg
esAnecessaryAtoAperformAcertainArequiredAfunctions,AinsteadAofAgrantingAthemAunrestrictedAaccessAtoAt
heAsystem?
AAEntitlementAprivilege BASeparationAofAprivilege
CAAggregationAofAprivileges
DASegregationAofAresponsibilitiesA AANSWER B
WhyAdoesAprivilegeAcreepAposeAaApotentialAsecurityArisk?
AAUserAprivilegesAdoAnotAmatchAtheirAjobArole.
BAWithAmoreAprivileges,AthereAareAmoreAresponsibilities.
CAAuditingAwillAshowAaAmismatchAbetweenAindividualAresponsibilitiesAandAtheirAaccessArights.
DAUsersAhaveAmoreAprivilegesAthanAtheyAneedAandAmayAperformAactionsAoutsideAtheirAjobAdescription.A
AANSWER D
AAsystemAdeveloperAisAimplementingAaAnewAsalesAsystem.ATheAsystemAdeveloperAisAconcernedAthatAuna
uthorizedAindividualsAmayAbeAableAtoAviewAsensitiveAcustomerAfinancialAdata.
WhichAfamilyAofAnonfunctionalArequirementsAshouldAbeAconsideredAasApartAofAtheAacceptanceAcriteria?