1|Page
WGU D385: SOFTWARE ENGINEERING CAPSTONE VERIFIED
ANSWERS AND QUESTIONS - MOST RECENT EDITION
2026/2027 (PASS GUARANTEE)
When should regression testing be conducted? ......ANSWER......After
some code changes
Which software testing relies on using old test cases?
......ANSWER......Regression testing
Which SDL phase implements static code analysis?
......ANSWER......Implementation
What are assertions? ......ANSWER......Conditional or Boolean
expressions used to check types or values of arguments
What happens when an assertion condition is false?
......ANSWER......The program will stop and give an error message
What is the general structure of an assertion? ......ANSWER......assert
expression[, assertion_message]
,2|Page
Which three functions are valid logging functions?
......ANSWER......INFO, GETCHILD, ERROR
Which logging function warns of a future problem?
......ANSWER......WARNING
Which test is solely black box testing? ......ANSWER......Integration
testing
Which two are defensive programming techniques?
......ANSWER......Value substitution, Exception handling
Which two classes does the bdb module implement?
......ANSWER......Breakpoint, Bdb
Which attribute provides a dictionary of breakpoint instances?
......ANSWER......bplist
How many arguments does clear_break() take? ......ANSWER......Two
Which function returns all set breakpoints?
......ANSWER......get_all_breaks()
,3|Page
Which three data types are user-provided? ......ANSWER......Cookies,
POST data payloads, URL parameters
Which function ensures safe logging? ......ANSWER......isalnum()
What is the default numeric value for WARNING? ......ANSWER......30
What is the default numeric value for INFO? ......ANSWER......20
Which QA security test categories must be performed?
......ANSWER......Benchmark, Scheduled, Exploratory
What are the code review life cycle phases? ......ANSWER......Identify
security objectives, Perform preliminary scan, Review code for security
issues
What are the limitations of static code analysis? ......ANSWER......Does
not account for runtime vulnerabilities, Requires coding and testing
skills, Tools must be language-specific
What is an advantage of static code analysis? ......ANSWER......It can be
fast when tools are used
, 4|Page
What is an advantage of dynamic code analysis? ......ANSWER......It is
not rule-based
What are the limitations of dynamic code analysis?
......ANSWER......False positives/negatives, Depends on rule correctness,
False sense of security
What is an effect of SQL injection? ......ANSWER......List all records from
the accounts table
What is social engineering? ......ANSWER......Test involving tricking users
What is a remote dial-up war dial? ......ANSWER......Test that brute-
forces modems
What is gray box testing? ......ANSWER......Test with limited company
info
What is white box testing? ......ANSWER......Test with full company info
What are two tests with little/no info? ......ANSWER......Black box, Gray
box
WGU D385: SOFTWARE ENGINEERING CAPSTONE VERIFIED
ANSWERS AND QUESTIONS - MOST RECENT EDITION
2026/2027 (PASS GUARANTEE)
When should regression testing be conducted? ......ANSWER......After
some code changes
Which software testing relies on using old test cases?
......ANSWER......Regression testing
Which SDL phase implements static code analysis?
......ANSWER......Implementation
What are assertions? ......ANSWER......Conditional or Boolean
expressions used to check types or values of arguments
What happens when an assertion condition is false?
......ANSWER......The program will stop and give an error message
What is the general structure of an assertion? ......ANSWER......assert
expression[, assertion_message]
,2|Page
Which three functions are valid logging functions?
......ANSWER......INFO, GETCHILD, ERROR
Which logging function warns of a future problem?
......ANSWER......WARNING
Which test is solely black box testing? ......ANSWER......Integration
testing
Which two are defensive programming techniques?
......ANSWER......Value substitution, Exception handling
Which two classes does the bdb module implement?
......ANSWER......Breakpoint, Bdb
Which attribute provides a dictionary of breakpoint instances?
......ANSWER......bplist
How many arguments does clear_break() take? ......ANSWER......Two
Which function returns all set breakpoints?
......ANSWER......get_all_breaks()
,3|Page
Which three data types are user-provided? ......ANSWER......Cookies,
POST data payloads, URL parameters
Which function ensures safe logging? ......ANSWER......isalnum()
What is the default numeric value for WARNING? ......ANSWER......30
What is the default numeric value for INFO? ......ANSWER......20
Which QA security test categories must be performed?
......ANSWER......Benchmark, Scheduled, Exploratory
What are the code review life cycle phases? ......ANSWER......Identify
security objectives, Perform preliminary scan, Review code for security
issues
What are the limitations of static code analysis? ......ANSWER......Does
not account for runtime vulnerabilities, Requires coding and testing
skills, Tools must be language-specific
What is an advantage of static code analysis? ......ANSWER......It can be
fast when tools are used
, 4|Page
What is an advantage of dynamic code analysis? ......ANSWER......It is
not rule-based
What are the limitations of dynamic code analysis?
......ANSWER......False positives/negatives, Depends on rule correctness,
False sense of security
What is an effect of SQL injection? ......ANSWER......List all records from
the accounts table
What is social engineering? ......ANSWER......Test involving tricking users
What is a remote dial-up war dial? ......ANSWER......Test that brute-
forces modems
What is gray box testing? ......ANSWER......Test with limited company
info
What is white box testing? ......ANSWER......Test with full company info
What are two tests with little/no info? ......ANSWER......Black box, Gray
box
