WGU D487 Secure Software Design
OA Exam 2025/2026 | Secure Coding,
Threat Modeling & App Security Q&A
100% correct
Which of the following is a common method for securing data in transit? - ✔️✔️C)
Encryption
RATIONALE: Encryption is commonly used to secure data in transit, protecting it from
interception and unauthorized access.
What is the purpose of threat modeling in secure software design? - ✔️✔️B) To identify
potential security threats and vulnerabilities
RATIONALE: Threat modeling aims to identify potential security threats and
vulnerabilities early in the development process to address them proactively.
Which of the following best describes "secure coding practices"? - ✔️✔️B) Guidelines
to prevent security vulnerabilities in code
RATIONALE: Secure coding practices are guidelines designed to prevent security
vulnerabilities during software development
What is the primary goal of secure software design? - ✔️✔️B) To mitigate security risks
throughout the software lifecycle
RATIONALE: The primary goal of secure software design is to mitigate security risks
throughout the software development lifecycle.
Which of the following principles is essential for developing secure software? - ✔️✔️C)
Least privilege
RATIONALE: The principle of least privilege ensures that users and systems have only
the access necessary to perform their tasks, reducing potential security risks.
What does "input validation" help to prevent in software applications? - ✔️✔️B)
Injection attacks
RATIONALE: Input validation helps to prevent injection attacks by ensuring that only
properly formatted data is processed by the application.
OA Exam 2025/2026 | Secure Coding,
Threat Modeling & App Security Q&A
100% correct
Which of the following is a common method for securing data in transit? - ✔️✔️C)
Encryption
RATIONALE: Encryption is commonly used to secure data in transit, protecting it from
interception and unauthorized access.
What is the purpose of threat modeling in secure software design? - ✔️✔️B) To identify
potential security threats and vulnerabilities
RATIONALE: Threat modeling aims to identify potential security threats and
vulnerabilities early in the development process to address them proactively.
Which of the following best describes "secure coding practices"? - ✔️✔️B) Guidelines
to prevent security vulnerabilities in code
RATIONALE: Secure coding practices are guidelines designed to prevent security
vulnerabilities during software development
What is the primary goal of secure software design? - ✔️✔️B) To mitigate security risks
throughout the software lifecycle
RATIONALE: The primary goal of secure software design is to mitigate security risks
throughout the software development lifecycle.
Which of the following principles is essential for developing secure software? - ✔️✔️C)
Least privilege
RATIONALE: The principle of least privilege ensures that users and systems have only
the access necessary to perform their tasks, reducing potential security risks.
What does "input validation" help to prevent in software applications? - ✔️✔️B)
Injection attacks
RATIONALE: Input validation helps to prevent injection attacks by ensuring that only
properly formatted data is processed by the application.
