WGU D487 SECURE SOFTWARE DESIGN (SECURE
SOFTWARE DESIGN) — 2026/2027 LATEST UPDATE
COMPREHENSIVE EXAM PRACTICE, ACTUAL STUDY
GUIDE & FULL TESTBANK — 150 ADVANCED PRACTICE
QUESTIONS WITH VERIFIED SOLUTIONS & RATIONALES
TABLE OF CONTENTS
i. Secure Software Design Principles and Security Foundations
ii. Threat Modeling, Risk Analysis, and Attack Surfaces
iii. Secure Requirements and Security Architecture
iv. Authentication, Authorization, and Access Control
v. Input Validation, Output Encoding, and Injection Prevention
vi. Cryptography, Secrets Management, and Data Protection
vii. Secure Coding and Application Security Controls
viii. Secure APIs, Web Applications, and Distributed Systems
ix. Secure Software Development Lifecycle and DevSecOps
x. Vulnerability Management, Testing, and Code Review
xi. Secure Configuration, Deployment, Logging, and Monitoring
xii. Privacy, Compliance, Supply-Chain Security, and Incident Response
xiii. Advanced Secure Design Scenarios and Professional Judgment
DESCRIPTION
This comprehensive Secure Software Design practice examination is designed to
strengthen advanced knowledge of secure architecture, threat modeling,
authentication, authorization, cryptography, secure coding, vulnerability management,
testing, deployment, DevSecOps, privacy, and software supply-chain security. It
emphasizes the analytical judgment required to identify vulnerabilities, evaluate
competing controls, select appropriate mitigations, and design resilient software
under realistic conditions. The resource is suitable for WGU students, software
developers, security practitioners, cybersecurity professionals, and learners preparing
for advanced assessments. It contains 100+ practice questions and answers with
concise rationales covering foundational through highly challenging scenarios.
Purchase and instantly get a downloadable and editable PDF for convenient study,
review, and preparation.
QUESTIONS 1–150
Question 1
,A development team is designing a payment service. The service receives a
transaction amount from a client application and passes it to a database query. Which
design decision provides the strongest protection against SQL injection?
A. Reject requests containing SQL keywords
B. Escape quotation marks before constructing the query
C. Use parameterized queries with bound variables
D. Encrypt the transaction amount before submitting the query
🔴 Correct Answer: C. Use parameterized queries with bound variables.
🔵 Explanation: Parameterized queries separate SQL instructions from untrusted data,
preventing supplied input from being interpreted as executable SQL. Keyword filtering
and escaping are less reliable because they depend on anticipating malicious input
patterns.
Question 2
A security architect is asked to reduce the attack surface of an Internet-facing
application. Which change most directly accomplishes this objective?
A. Increasing the application's logging verbosity
B. Removing unnecessary exposed services and endpoints
C. Increasing the database backup frequency
D. Requiring users to change passwords monthly
🔴 Correct Answer: B. Removing unnecessary exposed services and endpoints.
🔵 Explanation: Attack surface represents the collection of accessible interfaces and
components through which an attacker can attempt compromise. Eliminating
unnecessary interfaces directly reduces opportunities for attack.
Question 3
During threat modeling, a team identifies a component that accepts untrusted data
from the public Internet and writes it directly to an internal database. What should the
team prioritize?
A. Increasing database storage capacity
B. Establishing trust boundaries and validating the incoming data
C. Reducing the number of database indexes
D. Increasing application response time
🔴 Correct Answer: B. Establishing trust boundaries and validating the incoming
data.
🔵 Explanation: The transition from an untrusted source into a trusted internal
component represents an important trust boundary. Validation and appropriate security
controls should be applied before the data crosses that boundary.
,Question 4
A company wants developers to consider security before implementation begins.
Which approach is most effective?
A. Conduct penetration testing only after release
B. Add security requirements during requirements analysis
C. Require users to report vulnerabilities after deployment
D. Perform malware scanning after production deployment
🔴 Correct Answer: B. Add security requirements during requirements analysis.
🔵 Explanation: Security is most effective when incorporated early in the software
development lifecycle. Security requirements allow architectural and implementation
decisions to account for threats before expensive remediation becomes necessary.
Question 5
An application allows authenticated users to retrieve invoices by supplying an invoice
ID. A user changes /invoice/1001 to /invoice/1002 and successfully retrieves
another customer's invoice. Which vulnerability is demonstrated?
A. Cross-site request forgery
B. Broken object-level authorization
C. SQL injection
D. Session fixation
🔴 Correct Answer: B. Broken object-level authorization.
🔵 Explanation: The application authenticates the user but fails to verify whether that
user is authorized to access the requested object. This is an authorization failure rather
than an authentication failure.
Question 6
A secure design requires that users receive only the permissions necessary to perform
their assigned tasks. Which principle is being applied?
A. Defense in depth
B. Least privilege
C. Fail-open design
D. Complete mediation
🔴 Correct Answer: B. Least privilege.
🔵 Explanation: Least privilege limits subjects to the minimum permissions required for
legitimate activities. This reduces the potential impact of compromised accounts or
software components.
, Question 7
A web application stores authentication tokens in a browser-accessible location. An
attacker discovers a cross-site scripting vulnerability and steals the token. Which
cookie attribute would most directly reduce the ability of JavaScript to access a
session cookie?
A. Secure
B. SameSite
C. HttpOnly
D. Domain
🔴 Correct Answer: C. HttpOnly.
🔵 Explanation: The HttpOnly attribute prevents client-side scripts from directly reading
the cookie. Secure protects transmission over HTTPS, while SameSite primarily restricts
cross-site cookie transmission.
Question 8
A system must ensure that a user cannot modify a URL parameter to access another
user's account information. Which control should be applied at the server?
A. Client-side validation only
B. Server-side authorization checks for the requested resource
C. URL encoding
D. Browser caching restrictions
🔴 Correct Answer: B. Server-side authorization checks for the requested resource.
🔵 Explanation: Authorization must be enforced by a trusted server-side component.
Client-side controls can be bypassed and therefore cannot reliably protect resources.
Question 9
A developer proposes storing passwords using SHA-256 without a salt. What is the
primary security concern?
A. SHA-256 cannot generate hexadecimal output
B. Fast unsalted hashing facilitates offline password cracking
C. SHA-256 cannot be implemented on modern systems
D. Hashing prevents password verification
🔴 Correct Answer: B. Fast unsalted hashing facilitates offline password cracking.
🔵 Explanation: Password storage requires a password-specific, deliberately expensive
hashing or derivation function with a unique salt. Fast general-purpose hashes allow
attackers to test enormous numbers of password guesses efficiently.
SOFTWARE DESIGN) — 2026/2027 LATEST UPDATE
COMPREHENSIVE EXAM PRACTICE, ACTUAL STUDY
GUIDE & FULL TESTBANK — 150 ADVANCED PRACTICE
QUESTIONS WITH VERIFIED SOLUTIONS & RATIONALES
TABLE OF CONTENTS
i. Secure Software Design Principles and Security Foundations
ii. Threat Modeling, Risk Analysis, and Attack Surfaces
iii. Secure Requirements and Security Architecture
iv. Authentication, Authorization, and Access Control
v. Input Validation, Output Encoding, and Injection Prevention
vi. Cryptography, Secrets Management, and Data Protection
vii. Secure Coding and Application Security Controls
viii. Secure APIs, Web Applications, and Distributed Systems
ix. Secure Software Development Lifecycle and DevSecOps
x. Vulnerability Management, Testing, and Code Review
xi. Secure Configuration, Deployment, Logging, and Monitoring
xii. Privacy, Compliance, Supply-Chain Security, and Incident Response
xiii. Advanced Secure Design Scenarios and Professional Judgment
DESCRIPTION
This comprehensive Secure Software Design practice examination is designed to
strengthen advanced knowledge of secure architecture, threat modeling,
authentication, authorization, cryptography, secure coding, vulnerability management,
testing, deployment, DevSecOps, privacy, and software supply-chain security. It
emphasizes the analytical judgment required to identify vulnerabilities, evaluate
competing controls, select appropriate mitigations, and design resilient software
under realistic conditions. The resource is suitable for WGU students, software
developers, security practitioners, cybersecurity professionals, and learners preparing
for advanced assessments. It contains 100+ practice questions and answers with
concise rationales covering foundational through highly challenging scenarios.
Purchase and instantly get a downloadable and editable PDF for convenient study,
review, and preparation.
QUESTIONS 1–150
Question 1
,A development team is designing a payment service. The service receives a
transaction amount from a client application and passes it to a database query. Which
design decision provides the strongest protection against SQL injection?
A. Reject requests containing SQL keywords
B. Escape quotation marks before constructing the query
C. Use parameterized queries with bound variables
D. Encrypt the transaction amount before submitting the query
🔴 Correct Answer: C. Use parameterized queries with bound variables.
🔵 Explanation: Parameterized queries separate SQL instructions from untrusted data,
preventing supplied input from being interpreted as executable SQL. Keyword filtering
and escaping are less reliable because they depend on anticipating malicious input
patterns.
Question 2
A security architect is asked to reduce the attack surface of an Internet-facing
application. Which change most directly accomplishes this objective?
A. Increasing the application's logging verbosity
B. Removing unnecessary exposed services and endpoints
C. Increasing the database backup frequency
D. Requiring users to change passwords monthly
🔴 Correct Answer: B. Removing unnecessary exposed services and endpoints.
🔵 Explanation: Attack surface represents the collection of accessible interfaces and
components through which an attacker can attempt compromise. Eliminating
unnecessary interfaces directly reduces opportunities for attack.
Question 3
During threat modeling, a team identifies a component that accepts untrusted data
from the public Internet and writes it directly to an internal database. What should the
team prioritize?
A. Increasing database storage capacity
B. Establishing trust boundaries and validating the incoming data
C. Reducing the number of database indexes
D. Increasing application response time
🔴 Correct Answer: B. Establishing trust boundaries and validating the incoming
data.
🔵 Explanation: The transition from an untrusted source into a trusted internal
component represents an important trust boundary. Validation and appropriate security
controls should be applied before the data crosses that boundary.
,Question 4
A company wants developers to consider security before implementation begins.
Which approach is most effective?
A. Conduct penetration testing only after release
B. Add security requirements during requirements analysis
C. Require users to report vulnerabilities after deployment
D. Perform malware scanning after production deployment
🔴 Correct Answer: B. Add security requirements during requirements analysis.
🔵 Explanation: Security is most effective when incorporated early in the software
development lifecycle. Security requirements allow architectural and implementation
decisions to account for threats before expensive remediation becomes necessary.
Question 5
An application allows authenticated users to retrieve invoices by supplying an invoice
ID. A user changes /invoice/1001 to /invoice/1002 and successfully retrieves
another customer's invoice. Which vulnerability is demonstrated?
A. Cross-site request forgery
B. Broken object-level authorization
C. SQL injection
D. Session fixation
🔴 Correct Answer: B. Broken object-level authorization.
🔵 Explanation: The application authenticates the user but fails to verify whether that
user is authorized to access the requested object. This is an authorization failure rather
than an authentication failure.
Question 6
A secure design requires that users receive only the permissions necessary to perform
their assigned tasks. Which principle is being applied?
A. Defense in depth
B. Least privilege
C. Fail-open design
D. Complete mediation
🔴 Correct Answer: B. Least privilege.
🔵 Explanation: Least privilege limits subjects to the minimum permissions required for
legitimate activities. This reduces the potential impact of compromised accounts or
software components.
, Question 7
A web application stores authentication tokens in a browser-accessible location. An
attacker discovers a cross-site scripting vulnerability and steals the token. Which
cookie attribute would most directly reduce the ability of JavaScript to access a
session cookie?
A. Secure
B. SameSite
C. HttpOnly
D. Domain
🔴 Correct Answer: C. HttpOnly.
🔵 Explanation: The HttpOnly attribute prevents client-side scripts from directly reading
the cookie. Secure protects transmission over HTTPS, while SameSite primarily restricts
cross-site cookie transmission.
Question 8
A system must ensure that a user cannot modify a URL parameter to access another
user's account information. Which control should be applied at the server?
A. Client-side validation only
B. Server-side authorization checks for the requested resource
C. URL encoding
D. Browser caching restrictions
🔴 Correct Answer: B. Server-side authorization checks for the requested resource.
🔵 Explanation: Authorization must be enforced by a trusted server-side component.
Client-side controls can be bypassed and therefore cannot reliably protect resources.
Question 9
A developer proposes storing passwords using SHA-256 without a salt. What is the
primary security concern?
A. SHA-256 cannot generate hexadecimal output
B. Fast unsalted hashing facilitates offline password cracking
C. SHA-256 cannot be implemented on modern systems
D. Hashing prevents password verification
🔴 Correct Answer: B. Fast unsalted hashing facilitates offline password cracking.
🔵 Explanation: Password storage requires a password-specific, deliberately expensive
hashing or derivation function with a unique salt. Fast general-purpose hashes allow
attackers to test enormous numbers of password guesses efficiently.
