WGU D487 SECURE SOFTWARE DESIGN
OBJECTIVE ASSESSMENT - EXAM
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100%
Correct Verified Answers) D487 Secure Software Design Objective Assessment
2026/2027 Test Bank V3 2026/2027
A+ Verified Edition: 2026/2027 Passing Score: 75%
EXAM STRUCTURE
Section 1: Secure Software Development Lifecycle and Foundational Principles
Section 2: Threat Modeling, Attack Surfaces and Risk Assessment
Section 3: Secure Architecture, Design Patterns and Defense in Depth
Section 4: Secure Coding, Input Validation and Output Encoding
Section 5: Authentication, Authorization, Session and Access Control
Section 6: Cryptography, Key Management and Data Protection in Design
Section 7: Vulnerability Management, Testing and Secure Configuration
Section 8: Security Requirements, Compliance, Logging and Incident Response Design
COVER PAGE - 1
, SECTIONS COVERED
1. Secure Software Development Lifecycle and Foundational Principles
2. Threat Modeling, Attack Surfaces and Risk Assessment
3. Secure Architecture, Design Patterns and Defense in Depth
4. Secure Coding, Input Validation and Output Encoding
5. Authentication, Authorization, Session and Access Control
6. Cryptography, Key Management and Data Protection in Design
7. Vulnerability Management, Testing and Secure Configuration
8. Security Requirements, Compliance, Logging and Incident Response Design
EXAM INFORMATION
This objective assessment evaluates knowledge of secure software design principles, threat modeling, secure architecture, coding practices,
authentication and authorization, cryptography, vulnerability management, and security requirements. Each question carries 1 mark. A
minimum score of 75% is required to pass. Select the single best answer for each question.
SECTION 1: SECURE SOFTWARE DEVELOPMENT LIFECYCLE AND FOUNDATIONAL PRINCIPLES
Q1
A development team lead is working on a mobile banking app during a code review session. The team wants to embed security activities from
the earliest stages rather than treating security as a final gate. This approach is best described as implementing:
A. Security by design and shift-left practices
B. Penetration testing only at release
C. Post-deployment monitoring exclusively
D. Annual external audits
Correct Answer: A
Rationale:
Security by design and shift-left integrate security into every phase of the lifecycle, reducing cost and risk of late discoveries. Late-stage testing alone leaves
design flaws unaddressed.
Q2
While defining requirements for a microservices-based e-commerce platform, a security engineer insists that every security control must be
justified by a clear threat and that complexity should be minimized. This aligns with which secure design principle?
A. Open design
B. Psychological acceptability
C. Economy of mechanism
D. Complete mediation
Correct Answer: C
Rationale:
Economy of mechanism favors simple, small designs that are easier to verify and less likely to contain hidden flaws. Complex mechanisms increase the
chance of implementation errors.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 2
, Q3
A devsecops engineer is reviewing a financial trading system during a code review session and notes that the system grants users only the
minimum permissions needed for their tasks. This practice directly implements:
A. The principle of least privilege
B. Fail-safe defaults only
C. Separation of privilege
D. Least common mechanism
Correct Answer: A
Rationale:
Least privilege restricts access rights to the bare minimum required, limiting the damage from compromised accounts or errors. It is a foundational control in
secure design.
Q4
During a design discussion for a SaaS multi-tenant platform, the team decides that the system should deny access by default and only grant it
when explicitly authorized. This decision reflects:
A. Least privilege
B. Open design
C. Fail-safe defaults
D. Complete mediation
Correct Answer: C
Rationale:
Fail-safe defaults ensure that the absence of an explicit grant results in denial, reducing the risk of accidental exposure. Complete mediation requires
checking every access attempt.
Q5
An application security specialist is introducing security activities into the CI/CD pipeline for a mobile banking app. Automated scans that
examine source code without executing it are examples of:
A. Static application security testing (SAST)
B. Dynamic application security testing
C. Interactive application security testing
D. Runtime application self-protection
Correct Answer: A
Rationale:
SAST analyzes source or bytecode for patterns associated with vulnerabilities without running the application. DAST tests the running application, while
IAST and RASP operate at runtime.
Q6
A systems designer is working on a microservices-based e-commerce platform while preparing for a penetration test. The team wants to
embed security activities from the earliest stages rather than treating security as a final gate. This approach is best described as
implementing:
A. Post-deployment monitoring exclusively
B. Annual external audits
C. Security by design and shift-left practices
D. Penetration testing only at release
Correct Answer: C
Rationale:
Security by design and shift-left integrate security into every phase of the lifecycle, reducing cost and risk of late discoveries. Late-stage testing alone leaves
design flaws unaddressed.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 3
, Q7
While defining requirements for a financial trading system, a cloud security architect insists that every security control must be justified by a
clear threat and that complexity should be minimized. This aligns with which secure design principle?
A. Economy of mechanism
B. Complete mediation
C. Open design
D. Psychological acceptability
Correct Answer: A
Rationale:
Economy of mechanism favors simple, small designs that are easier to verify and less likely to contain hidden flaws. Complex mechanisms increase the
chance of implementation errors.
Q8
A senior software architect is carefully reviewing a SaaS multi-tenant platform while preparing for a penetration test and notes that the system
grants users only the minimum permissions needed for their tasks. This practice directly implements:
A. Separation of privilege
B. Least common mechanism
C. The principle of least privilege
D. Fail-safe defaults only
Correct Answer: C
Rationale:
Least privilege restricts access rights to the bare minimum required, limiting the damage from compromised accounts or errors. It is a foundational control in
secure design.
Q9
During a design discussion for a mobile banking app, the development team decides that the system should deny access by default and only
grant it when explicitly authorized. This decision reflects:
A. Fail-safe defaults
B. Complete mediation
C. Least privilege
D. Open design
Correct Answer: A
Rationale:
Fail-safe defaults ensure that the absence of an explicit grant results in denial, reducing the risk of accidental exposure. Complete mediation requires
checking every access attempt.
Q10
A security engineer is introducing security activities into the CI/CD pipeline for a microservices-based e-commerce platform. Automated scans
that examine source code without executing it are examples of:
A. Interactive application security testing
B. Runtime application self-protection
C. Static application security testing (SAST)
D. Dynamic application security testing
Correct Answer: C
Rationale:
SAST analyzes source or bytecode for patterns associated with vulnerabilities without running the application. DAST tests the running application, while
IAST and RASP operate at runtime.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 4
OBJECTIVE ASSESSMENT - EXAM
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100%
Correct Verified Answers) D487 Secure Software Design Objective Assessment
2026/2027 Test Bank V3 2026/2027
A+ Verified Edition: 2026/2027 Passing Score: 75%
EXAM STRUCTURE
Section 1: Secure Software Development Lifecycle and Foundational Principles
Section 2: Threat Modeling, Attack Surfaces and Risk Assessment
Section 3: Secure Architecture, Design Patterns and Defense in Depth
Section 4: Secure Coding, Input Validation and Output Encoding
Section 5: Authentication, Authorization, Session and Access Control
Section 6: Cryptography, Key Management and Data Protection in Design
Section 7: Vulnerability Management, Testing and Secure Configuration
Section 8: Security Requirements, Compliance, Logging and Incident Response Design
COVER PAGE - 1
, SECTIONS COVERED
1. Secure Software Development Lifecycle and Foundational Principles
2. Threat Modeling, Attack Surfaces and Risk Assessment
3. Secure Architecture, Design Patterns and Defense in Depth
4. Secure Coding, Input Validation and Output Encoding
5. Authentication, Authorization, Session and Access Control
6. Cryptography, Key Management and Data Protection in Design
7. Vulnerability Management, Testing and Secure Configuration
8. Security Requirements, Compliance, Logging and Incident Response Design
EXAM INFORMATION
This objective assessment evaluates knowledge of secure software design principles, threat modeling, secure architecture, coding practices,
authentication and authorization, cryptography, vulnerability management, and security requirements. Each question carries 1 mark. A
minimum score of 75% is required to pass. Select the single best answer for each question.
SECTION 1: SECURE SOFTWARE DEVELOPMENT LIFECYCLE AND FOUNDATIONAL PRINCIPLES
Q1
A development team lead is working on a mobile banking app during a code review session. The team wants to embed security activities from
the earliest stages rather than treating security as a final gate. This approach is best described as implementing:
A. Security by design and shift-left practices
B. Penetration testing only at release
C. Post-deployment monitoring exclusively
D. Annual external audits
Correct Answer: A
Rationale:
Security by design and shift-left integrate security into every phase of the lifecycle, reducing cost and risk of late discoveries. Late-stage testing alone leaves
design flaws unaddressed.
Q2
While defining requirements for a microservices-based e-commerce platform, a security engineer insists that every security control must be
justified by a clear threat and that complexity should be minimized. This aligns with which secure design principle?
A. Open design
B. Psychological acceptability
C. Economy of mechanism
D. Complete mediation
Correct Answer: C
Rationale:
Economy of mechanism favors simple, small designs that are easier to verify and less likely to contain hidden flaws. Complex mechanisms increase the
chance of implementation errors.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 2
, Q3
A devsecops engineer is reviewing a financial trading system during a code review session and notes that the system grants users only the
minimum permissions needed for their tasks. This practice directly implements:
A. The principle of least privilege
B. Fail-safe defaults only
C. Separation of privilege
D. Least common mechanism
Correct Answer: A
Rationale:
Least privilege restricts access rights to the bare minimum required, limiting the damage from compromised accounts or errors. It is a foundational control in
secure design.
Q4
During a design discussion for a SaaS multi-tenant platform, the team decides that the system should deny access by default and only grant it
when explicitly authorized. This decision reflects:
A. Least privilege
B. Open design
C. Fail-safe defaults
D. Complete mediation
Correct Answer: C
Rationale:
Fail-safe defaults ensure that the absence of an explicit grant results in denial, reducing the risk of accidental exposure. Complete mediation requires
checking every access attempt.
Q5
An application security specialist is introducing security activities into the CI/CD pipeline for a mobile banking app. Automated scans that
examine source code without executing it are examples of:
A. Static application security testing (SAST)
B. Dynamic application security testing
C. Interactive application security testing
D. Runtime application self-protection
Correct Answer: A
Rationale:
SAST analyzes source or bytecode for patterns associated with vulnerabilities without running the application. DAST tests the running application, while
IAST and RASP operate at runtime.
Q6
A systems designer is working on a microservices-based e-commerce platform while preparing for a penetration test. The team wants to
embed security activities from the earliest stages rather than treating security as a final gate. This approach is best described as
implementing:
A. Post-deployment monitoring exclusively
B. Annual external audits
C. Security by design and shift-left practices
D. Penetration testing only at release
Correct Answer: C
Rationale:
Security by design and shift-left integrate security into every phase of the lifecycle, reducing cost and risk of late discoveries. Late-stage testing alone leaves
design flaws unaddressed.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 3
, Q7
While defining requirements for a financial trading system, a cloud security architect insists that every security control must be justified by a
clear threat and that complexity should be minimized. This aligns with which secure design principle?
A. Economy of mechanism
B. Complete mediation
C. Open design
D. Psychological acceptability
Correct Answer: A
Rationale:
Economy of mechanism favors simple, small designs that are easier to verify and less likely to contain hidden flaws. Complex mechanisms increase the
chance of implementation errors.
Q8
A senior software architect is carefully reviewing a SaaS multi-tenant platform while preparing for a penetration test and notes that the system
grants users only the minimum permissions needed for their tasks. This practice directly implements:
A. Separation of privilege
B. Least common mechanism
C. The principle of least privilege
D. Fail-safe defaults only
Correct Answer: C
Rationale:
Least privilege restricts access rights to the bare minimum required, limiting the damage from compromised accounts or errors. It is a foundational control in
secure design.
Q9
During a design discussion for a mobile banking app, the development team decides that the system should deny access by default and only
grant it when explicitly authorized. This decision reflects:
A. Fail-safe defaults
B. Complete mediation
C. Least privilege
D. Open design
Correct Answer: A
Rationale:
Fail-safe defaults ensure that the absence of an explicit grant results in denial, reducing the risk of accidental exposure. Complete mediation requires
checking every access attempt.
Q10
A security engineer is introducing security activities into the CI/CD pipeline for a microservices-based e-commerce platform. Automated scans
that examine source code without executing it are examples of:
A. Interactive application security testing
B. Runtime application self-protection
C. Static application security testing (SAST)
D. Dynamic application security testing
Correct Answer: C
Rationale:
SAST analyzes source or bytecode for patterns associated with vulnerabilities without running the application. DAST tests the running application, while
IAST and RASP operate at runtime.
WGU D487 Oa 2026/2027 Test Bank 3 With 420 Questions And Correct Answers (100% Correc... Page 4
