WGU - D487 | Questions with 100% Verified Answers |
Latest Update 2026/2027
Question: Deployment Phase (SDLC)
Answer: Security is pushed out
Question: Design Phase (SDLC)
Answer: Requirements are prepared for the technical design
Question: Implementation Phase
Answer: The resources involved in the application from a known resource are determined
Question: Maintenance Phase
Answer: Ongoing security monitoring is implemented
Question: Planning Phase of SDLC
Answer: vision and next steps are created
Question: secure code
Answer: a principle design in coding that refers to code security best practices, safeguards,
and
protection against vulnerabilities
Question: threat modeling
Answer: a structured process to protect against vulnerabilities
Question: What are the three core elements of security
Answer: confidentiality, integrity, and availability
Question: 8 phases of the SDLC
Answer: planning, requirements, design, implementation, testing, deployment, maintenance
and
end of life
Question: What is software security
Answer: Security that deals with securing the foundational programmatic logic of the
underlying
software
Question: Which part of the CIA keeps unauthorized users from
accessing confidential information
Answer: Confidentiality
, Question: BSIMM
Answer: a study of real-world software security that allows you to develop your software
security
over time
Question: dynamic analysis
Answer: analysis of computer software that is performed when executing the program on a
real or
virtual processor in real time
Question: fuzz testing
Answer: automated or semi-automated testing that provides invalid, unexpected, or random
data
to the computer program.
Question: measure model
Answer: A set of data security methods that developers take to protect against vulnerabilities
Question: metric model
Answer: allows organizations to determine the effectiveness of their security controls
Question: OWASP
Answer: A flexible and prospective framework to build security into your software development
organization
Question: static analysis
Answer: The analysis of computer software that is performed without executing programs
Question: Computer Vulnerabilities and Exposures
Answer: A list of information that aims to provide common names for publicly known security
vulnerabilities
Question: What are the three primary tools basic to the SDLC
Answer: Fuzz testing, static analysis, and dynamic analysis testing
Question: In which phase of the SDLC should the software security team
be involved
Answer: Concept
Question: Waterfall
Answer: An approach that divides the process of software development into separate phases.
The
outcome of one phase acts as the input for the next phase
Latest Update 2026/2027
Question: Deployment Phase (SDLC)
Answer: Security is pushed out
Question: Design Phase (SDLC)
Answer: Requirements are prepared for the technical design
Question: Implementation Phase
Answer: The resources involved in the application from a known resource are determined
Question: Maintenance Phase
Answer: Ongoing security monitoring is implemented
Question: Planning Phase of SDLC
Answer: vision and next steps are created
Question: secure code
Answer: a principle design in coding that refers to code security best practices, safeguards,
and
protection against vulnerabilities
Question: threat modeling
Answer: a structured process to protect against vulnerabilities
Question: What are the three core elements of security
Answer: confidentiality, integrity, and availability
Question: 8 phases of the SDLC
Answer: planning, requirements, design, implementation, testing, deployment, maintenance
and
end of life
Question: What is software security
Answer: Security that deals with securing the foundational programmatic logic of the
underlying
software
Question: Which part of the CIA keeps unauthorized users from
accessing confidential information
Answer: Confidentiality
, Question: BSIMM
Answer: a study of real-world software security that allows you to develop your software
security
over time
Question: dynamic analysis
Answer: analysis of computer software that is performed when executing the program on a
real or
virtual processor in real time
Question: fuzz testing
Answer: automated or semi-automated testing that provides invalid, unexpected, or random
data
to the computer program.
Question: measure model
Answer: A set of data security methods that developers take to protect against vulnerabilities
Question: metric model
Answer: allows organizations to determine the effectiveness of their security controls
Question: OWASP
Answer: A flexible and prospective framework to build security into your software development
organization
Question: static analysis
Answer: The analysis of computer software that is performed without executing programs
Question: Computer Vulnerabilities and Exposures
Answer: A list of information that aims to provide common names for publicly known security
vulnerabilities
Question: What are the three primary tools basic to the SDLC
Answer: Fuzz testing, static analysis, and dynamic analysis testing
Question: In which phase of the SDLC should the software security team
be involved
Answer: Concept
Question: Waterfall
Answer: An approach that divides the process of software development into separate phases.
The
outcome of one phase acts as the input for the next phase
