WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What is a step for constructing a threat model for a project when using
practical risk analysis?
AAlign your business goals
B Apply engineering methods
C Estimate probability of project time
DMake a list of what you are trying to protect - ANSWER-D
Which cyber threats are typically surgical by nature, have highly specific
targeting, and are technologically sophisticated?
ATactical attacks
B Criminal attacks
C Strategic attacks
DUser-specific attacks - ANSWER-A
Which type of cyberattacks are often intended to elevate awareness of a
topic?
ACyberwarfare
B Tactical attacks
C User-specific attacks
DSociopolitical attacks - ANSWER-D
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What type of attack locks a user's desktop and then requires a payment to
unlock it?
APhishing
B Keylogger
C Ransomware
DDenial-of-service - ANSWER-C
What is a countermeasure against various forms of XML and XML path
injection attacks?
AXML name wrapping
B XML unicode encoding
C XML attribute escaping
DXML distinguished name escaping - ANSWER-C
Which countermeasure is used to mitigate SQL injection attacks?
ASQL Firewall
B Projected bijection
C Query parameterization
DProgressive ColdFusion - ANSWER-C
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What is an appropriate countermeasure to an escalation of privilege
attack?
AEnforcing strong password policies
BUsing standard encryption algorithms and correct key sizes
C Enabling the auditing and logging of all administration activities
DRestricting access to specific operations through role-based access
controls - ANSWER-D Which configuration management security
countermeasure implements least privilege access control?
AFollowing strong password policies to restrict access
B Restricting file access to users based on authorization
C Avoiding clear text format for credentials and sensitive data
DUsing AES 256 encryption for communications of a sensitive nature -
ANSWER-B
Which phase of the software development life cycle (SDL/SDLC) would be
used to determine the minimum set of privileges required to perform the
targeted task and restrict the user to a domain with those privileges?
ADesign
B Deploy
C Development
DImplementation - ANSWER-A
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
Which least privilege method is more granular in scope and grants specific
processes only the privileges necessary to perform certain required
functions, instead of granting them unrestricted access to the system?
AEntitlement privilege
B Separation of privilege
C Aggregation of privileges
DSegregation of responsibilities - ANSWER-B
Why does privilege creep pose a potential security risk?
AUser privileges do not match their job role.
BWith more privileges, there are more responsibilities.
C Auditing will show a mismatch between individual responsibilities and
their access rights.
DUsers have more privileges than they need and may perform actions
outside their job description. - ANSWER-D
A system developer is implementing a new sales system. The system
developer is concerned that unauthorized individuals may be able to view
sensitive customer financial data.
Which family of nonfunctional requirements should be considered as part
of the acceptance criteria?
666
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What is a step for constructing a threat model for a project when using
practical risk analysis?
AAlign your business goals
B Apply engineering methods
C Estimate probability of project time
DMake a list of what you are trying to protect - ANSWER-D
Which cyber threats are typically surgical by nature, have highly specific
targeting, and are technologically sophisticated?
ATactical attacks
B Criminal attacks
C Strategic attacks
DUser-specific attacks - ANSWER-A
Which type of cyberattacks are often intended to elevate awareness of a
topic?
ACyberwarfare
B Tactical attacks
C User-specific attacks
DSociopolitical attacks - ANSWER-D
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What type of attack locks a user's desktop and then requires a payment to
unlock it?
APhishing
B Keylogger
C Ransomware
DDenial-of-service - ANSWER-C
What is a countermeasure against various forms of XML and XML path
injection attacks?
AXML name wrapping
B XML unicode encoding
C XML attribute escaping
DXML distinguished name escaping - ANSWER-C
Which countermeasure is used to mitigate SQL injection attacks?
ASQL Firewall
B Projected bijection
C Query parameterization
DProgressive ColdFusion - ANSWER-C
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
What is an appropriate countermeasure to an escalation of privilege
attack?
AEnforcing strong password policies
BUsing standard encryption algorithms and correct key sizes
C Enabling the auditing and logging of all administration activities
DRestricting access to specific operations through role-based access
controls - ANSWER-D Which configuration management security
countermeasure implements least privilege access control?
AFollowing strong password policies to restrict access
B Restricting file access to users based on authorization
C Avoiding clear text format for credentials and sensitive data
DUsing AES 256 encryption for communications of a sensitive nature -
ANSWER-B
Which phase of the software development life cycle (SDL/SDLC) would be
used to determine the minimum set of privileges required to perform the
targeted task and restrict the user to a domain with those privileges?
ADesign
B Deploy
C Development
DImplementation - ANSWER-A
666
, WGU MASTER'S COURSE C706 - SECURE
SOFTWARE
DESIGN EXAM LATEST 2024 ACTUAL EXAM
400 QUESTIONS
AND CORRECT DETAILED ANSWERS WITH
RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
Which least privilege method is more granular in scope and grants specific
processes only the privileges necessary to perform certain required
functions, instead of granting them unrestricted access to the system?
AEntitlement privilege
B Separation of privilege
C Aggregation of privileges
DSegregation of responsibilities - ANSWER-B
Why does privilege creep pose a potential security risk?
AUser privileges do not match their job role.
BWith more privileges, there are more responsibilities.
C Auditing will show a mismatch between individual responsibilities and
their access rights.
DUsers have more privileges than they need and may perform actions
outside their job description. - ANSWER-D
A system developer is implementing a new sales system. The system
developer is concerned that unauthorized individuals may be able to view
sensitive customer financial data.
Which family of nonfunctional requirements should be considered as part
of the acceptance criteria?
666
