xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
Which due diligence activity for supply chain security should occur in the
initiation phase of the software acquisition life cycle?
ADeveloping a request for proposal (RFP) that includes supply chain
security risk management
B Lessening the risk of disseminating information during disposal
C Facilitating knowledge transfer between suppliers
DMitigating supply chain security risk by providing user guidance -
ANSWER--A
Which due diligence activity for supply chain security investigates the
means by which data sets are shared and assessed?
Aon-site assessment
B process policy review
C third-party assessment
Ddocument exchange and review - ANSWER--D
Consider these characteristics:
-Identification of the entity making the access request
-Verification that the request has not changed since its initiation
-Application of the appropriate authorization procedures
-Reexamination of previously authorized requests by the same entity
Which security design analysis is being described?
AOpen design
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
B Complete mediation
C Economy of mechanism
DLeast common mechanism - ANSWER--B
Which software security principle guards against the improper
modification or destruction of information and ensures the nonrepudiation
and authenticity of information?
AQuality
B Integrity
C Availability
DConfidentiality - ANSWER--B
What type of functional security requirement involves receiving,
processing, storing, transmitting, and delivering in report form?
ALogging
B Error handling
C Primary dataflow
DAccess control flow - ANSWER--C
Which nonfunctional security requirement provides a way to capture
information correctly and a way to store that information to help support
later audits?
ALogging
B Error handling
C Primary dataflow
DAccess control flow - ANSWER--A
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
Which security concept refers to the quality of information that could
cause harm or damage if disclosed?
AIsolation
B Discretion
C Seclusion
DSensitivity - ANSWER--D
Which technology would be an example of an injection flaw, according to
the OWASP Top 10?
ASQL
B API
C XML
DXSS - ANSWER--A
A company is creating a new software to track customer balance and
wants to design a secure application.
Which best practice should be applied?
ADevelop a secure authentication method that has a closed design
BAllow mediation bypass or suspension for software testing and
emergency planning
C Ensure there is physical acceptability to ensure software is intuitive for
the users to do their jobs
DCreate multiple layers of protection so that a subsequent layer provides
protection if a layer is breached - ANSWER--D
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
A company is developing a secure software that has to be evaluated and
tested by a large number of experts.
Which security principle should be applied?
AFail safe
B Open design
C Defense in depth
DComplete mediation - ANSWER--B
Which type of TCP scanning indicates that a system is moving to the
second phase in a three-way TCP handshake?
ATCP SYN scanning
B TCP ACK scanning
C TCP XMAS scanning
DTCP Connect scanning - ANSWER--A
Which evaluation technique provides invalid, unexpected, or random data
to the inputs of a computer software program?
AFuzz testing
B Static analysis
C Dynamic analysis
DRegression testing - ANSWER--A
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
Which due diligence activity for supply chain security should occur in the
initiation phase of the software acquisition life cycle?
ADeveloping a request for proposal (RFP) that includes supply chain
security risk management
B Lessening the risk of disseminating information during disposal
C Facilitating knowledge transfer between suppliers
DMitigating supply chain security risk by providing user guidance -
ANSWER--A
Which due diligence activity for supply chain security investigates the
means by which data sets are shared and assessed?
Aon-site assessment
B process policy review
C third-party assessment
Ddocument exchange and review - ANSWER--D
Consider these characteristics:
-Identification of the entity making the access request
-Verification that the request has not changed since its initiation
-Application of the appropriate authorization procedures
-Reexamination of previously authorized requests by the same entity
Which security design analysis is being described?
AOpen design
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
B Complete mediation
C Economy of mechanism
DLeast common mechanism - ANSWER--B
Which software security principle guards against the improper
modification or destruction of information and ensures the nonrepudiation
and authenticity of information?
AQuality
B Integrity
C Availability
DConfidentiality - ANSWER--B
What type of functional security requirement involves receiving,
processing, storing, transmitting, and delivering in report form?
ALogging
B Error handling
C Primary dataflow
DAccess control flow - ANSWER--C
Which nonfunctional security requirement provides a way to capture
information correctly and a way to store that information to help support
later audits?
ALogging
B Error handling
C Primary dataflow
DAccess control flow - ANSWER--A
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
Which security concept refers to the quality of information that could
cause harm or damage if disclosed?
AIsolation
B Discretion
C Seclusion
DSensitivity - ANSWER--D
Which technology would be an example of an injection flaw, according to
the OWASP Top 10?
ASQL
B API
C XML
DXSS - ANSWER--A
A company is creating a new software to track customer balance and
wants to design a secure application.
Which best practice should be applied?
ADevelop a secure authentication method that has a closed design
BAllow mediation bypass or suspension for software testing and
emergency planning
C Ensure there is physical acceptability to ensure software is intuitive for
the users to do their jobs
DCreate multiple layers of protection so that a subsequent layer provides
protection if a layer is breached - ANSWER--D
, xxx
WGU Master's Course C706 - Secure Software Design
EXAM 200+ QUESTIONS AND ANSWERS LATEST
2024.
A company is developing a secure software that has to be evaluated and
tested by a large number of experts.
Which security principle should be applied?
AFail safe
B Open design
C Defense in depth
DComplete mediation - ANSWER--B
Which type of TCP scanning indicates that a system is moving to the
second phase in a three-way TCP handshake?
ATCP SYN scanning
B TCP ACK scanning
C TCP XMAS scanning
DTCP Connect scanning - ANSWER--A
Which evaluation technique provides invalid, unexpected, or random data
to the inputs of a computer software program?
AFuzz testing
B Static analysis
C Dynamic analysis
DRegression testing - ANSWER--A
