WGU - D487 EXAM QUESTIONS WITH COMPLETE
SOLUTION
The scrum team is attending their morning meeting, which is
scheduled atthe beginning of the work day. Each team member
reports what they accomplished yesterday, what they plan to
accomplish today, and if they have any impediments that may cause
them to miss their delivery deadline.
Daily scrum
Which secure coding best practice says to use parameterized queries,
encrypted connection strings stored in separate configuration files,
and strong passwords or multi-factor authentication?
Database security
Which secure coding best practice says that all information passed to
other systems should be encrypted?
Communication security
Team members are being introduced during sprint zero in the project
kickoff meeting. The person being introduced is a member of the
scrum team, responsible for writing feature logic and attending sprint
ceremonies.
Software developer
A3: Design and Development, test plan framework
Define test scripts, Define the user community, Identify the showstoppers,
Identify internal resources, Identify external resources
Software security testing
White box, Gray box, Black box
Source-code analysis: White Box
Source-code security analyzers examine source code to detect and report
software weaknesses that can lead to security vulnerabilities.
Property-based: White Box
validates that the software's implemented
Source-code fault injection: White Box, Gray Box
is a technique used to improve code coverage by testing all code paths,
especially error-handling code paths that may not be exercised during
functional testing.
Binary fault injection: Gray Box, Black Box
SOLUTION
The scrum team is attending their morning meeting, which is
scheduled atthe beginning of the work day. Each team member
reports what they accomplished yesterday, what they plan to
accomplish today, and if they have any impediments that may cause
them to miss their delivery deadline.
Daily scrum
Which secure coding best practice says to use parameterized queries,
encrypted connection strings stored in separate configuration files,
and strong passwords or multi-factor authentication?
Database security
Which secure coding best practice says that all information passed to
other systems should be encrypted?
Communication security
Team members are being introduced during sprint zero in the project
kickoff meeting. The person being introduced is a member of the
scrum team, responsible for writing feature logic and attending sprint
ceremonies.
Software developer
A3: Design and Development, test plan framework
Define test scripts, Define the user community, Identify the showstoppers,
Identify internal resources, Identify external resources
Software security testing
White box, Gray box, Black box
Source-code analysis: White Box
Source-code security analyzers examine source code to detect and report
software weaknesses that can lead to security vulnerabilities.
Property-based: White Box
validates that the software's implemented
Source-code fault injection: White Box, Gray Box
is a technique used to improve code coverage by testing all code paths,
especially error-handling code paths that may not be exercised during
functional testing.
Binary fault injection: Gray Box, Black Box
