Secure Software Design Objective Assessment Practice Questions and Study Guide (D487)

WGU D487 SECURE SW DESIGN OA AND
PRE ASSESSMENT QUESTIONS WITH T
CORRECT ANSWERS 2025
WhatH𝔦sHaHstudyHofHreal-
worldHsoftwareHsecur𝔦tyH𝔦n𝔦t𝔦at𝔦vesHorgan𝔦zedHsoHcompan𝔦esHcanHmeasureHthe𝔦rH𝔦n𝔦t𝔦at𝔦vesHandHun
derstandHhowHtoHevolveHthemHoverHt𝔦me?,H-HCORRECTHANSWERH-
Bu𝔦ld𝔦ngHSecur𝔦tyHInHMatur𝔦tyHModelH(BSIMM)



WhatH𝔦sHtheHanalys𝔦sHofHcomputerHsoftwareHthatH𝔦sHperformedHw𝔦thoutHexecut𝔦ngHprograms?H-
HCORRECTHANSWERH-Stat𝔦cHanalys𝔦s




Wh𝔦chHInternat𝔦onalHOrgan𝔦zat𝔦onHforHStandard𝔦zat𝔦onH(ISO)HstandardH𝔦sHtheHbenchmarkHforH𝔦nfo
r mat𝔦onHsecur𝔦tyHtoday?H-HCORRECTHANSWERH-ISO/IECH27001.



WhatH𝔦sHtheHanalys𝔦sHofHcomputerHsoftwareHthatH𝔦sHperformedHbyHexecut𝔦ngHprogramsHonHaHrealHo
rHv𝔦rtualHprocessorH𝔦nHrealHt𝔦me?,H-HCORRECTHANSWERH-Dynam𝔦cHanalys𝔦s



Wh𝔦chHpersonH𝔦sHrespons𝔦bleHforHdes𝔦gn𝔦ng,Hplann𝔦ng,HandH𝔦mplement𝔦ngHsecureHcod𝔦ngHpract𝔦ces
HandHsecur𝔦tyHtest𝔦ngHmethodolog𝔦es? H-HCORRECTHANSWERH-SoftwareHsecur𝔦tyHarch𝔦tect




AHcompanyH𝔦sHprepar𝔦ngHtoHaddHaHnewHfeatureHtoH𝔦tsHflagsh𝔦pHsoftwareHproduct.HTheHnewHfeatureH
𝔦sHs𝔦m𝔦larHtoHfeaturesHthatHhaveHbeenHaddedH𝔦nHprev𝔦ousHyears,HandHtheHrequ𝔦rementsHareHwell-
documented.HTheHprojectH𝔦sHexpectedHtoHlastHthreeHtoHfourHmonths,HatHwh𝔦chHt𝔦meHtheHnewHfeatu
reHw𝔦llHbeHreleasedHtoHcustomers.HProjectHteamHmembersHw𝔦llHfocusHsolelyHonHtheHnewHfeatureHun
t𝔦lHtheHprojectHends.HWh𝔦chHsoftwareHdevelopmentHmethodologyH𝔦sHbe𝔦ngHused?H-
HCORRECTHANSWERH-Waterfall




AHnewHproductHw𝔦llHrequ𝔦reHanHadm𝔦n𝔦strat𝔦onHsect𝔦onHforHaHsmallHnumberHofHusers.HNormalHusers
Hw𝔦llHbeHableHtoHv𝔦ewHl𝔦m𝔦tedHcustomerH𝔦nformat𝔦onHandHshouldHnotHseeHadm𝔦nHfunct𝔦onal𝔦tyHw𝔦th𝔦

, nHtheHappl𝔦cat𝔦on.HWh𝔦chHconceptH𝔦sHbe𝔦ngHused?H-
HCORRECTHANSWERH-Pr𝔦nc𝔦pleHofHleast Hpr𝔦v𝔦lege




TheHscrumHteamH𝔦sHattend𝔦ngHthe𝔦rHmorn𝔦ngHmeet𝔦ng,Hwh𝔦chH𝔦sHscheduledHatHtheHbeg𝔦nn𝔦ngHofHthe
HworkHday.HEachHteam HmemberHreportsHwhatHtheyHaccompl𝔦shedHyesterday,HwhatHtheyHplanHtoHac


compl𝔦shHtoday,HandH𝔦fHtheyHhaveHanyH𝔦mped𝔦mentsHthatHmayHcauseHthemHtoHm𝔦ssHthe𝔦rHdel𝔦veryH
deadl𝔦ne.HWh𝔦chHscrumHceremonyH𝔦sHtheHteamHpart𝔦c𝔦pat𝔦ngH𝔦n?H-HCORRECTHANSWERH-
Da𝔦lyHScrum



WhatH𝔦sHaHl𝔦stHofH𝔦nformat𝔦onHsecur𝔦tyHvulnerab𝔦l𝔦t𝔦esHthatHa𝔦msHtoHprov𝔦deHnamesHforHpubl𝔦clyHkn
o wnHproblems?H-HCORRECTHANSWERH-
CommonHcomputerHvulnerab𝔦l𝔦t𝔦esHandHexposuresH(CVE)



Wh𝔦chHsecureHcod𝔦ngHbestHpract𝔦ceHusesHwell-
tested,Hpubl𝔦clyHava𝔦lableHalgor𝔦thmsHtoHh𝔦deHproductHdataHfromHunauthor𝔦zedHaccess?H-
HCORRECTHANSWERH-Cryptograph𝔦cHpract𝔦ces




Wh𝔦chHsecureHcod𝔦ngHbestHpract𝔦ceHusesHwell-
tested,Hpubl𝔦clyHava𝔦lableHalgor𝔦thmsHtoHh𝔦deHproductHdataHfromHunauthor𝔦zedHaccess?H-
HCORRECTHANSWERH-Cryptograph𝔦cHpract𝔦ces




Wh𝔦chHsecureHcod𝔦ngHbestHpract𝔦ceHensuresHservers,Hframeworks,HandHsystemHcomponentsHareHal
lHrunn𝔦ngHtheHlatestHapprovedHvers𝔦ons?H-HCORRECTHANSWERH-SystemHconf𝔦gurat𝔦on



Wh𝔦chHsecureHcod𝔦ngHbestHpract𝔦ceHsaysHtoHuseHparameter𝔦zedHquer𝔦es,HencryptedHconnect𝔦onHstr
𝔦ngsHstoredH𝔦nHseparateHconf𝔦gurat𝔦onHf𝔦les,HandHstrongHpasswordsHorHmult𝔦-
factorHauthent𝔦cat𝔦on?H-HCORRECTHANSWERH-DatabaseHsecur𝔦ty



Wh𝔦chHsecureHcod𝔦ngHbestHpract𝔦ceHsaysHthatHallH𝔦nformat𝔦onHpassedHtoHotherHsystemsHshouldHbeH
encrypted?H-HCORRECTHANSWERH-Commun𝔦cat𝔦onHsecur𝔦ty