WGU MASTER-S COURSE C706 - SECURE SOFTWARE TEST BANK

WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2025ACTUALEXAM400QUESTIONS
AND CORRECTDETAILED ANSWERS WITH RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+

WhatKisKaKstepKforKconstructingKaKthreatKmodelKforKaKprojectKwhenKusingKpracticalKriskKanalysis?



AKAlignKyourKbusinessKgoals

BKApplyKengineeringKmethods

CKEstimateKprobabilityKofKprojectKtime

DKMakeKaKlistKofKwhatKyouKareKtryingKtoKprotectK-KANSWER-D



WhichKcyberKthreatsKareKtypicallyKsurgicalKbyKnature,KhaveKhighlyKspecificKtargeting,KandKareKtechnologi
callyKsophisticated?



AKTacticalKattacks

BKCriminalKattacks

CKStrategicKattacks

DKUser-specificKattacksK-KANSWER-A



WhichKtypeKofKcyberattacksKareKoftenKintendedKtoKelevateKawarenessKofKaKtopic?



AKCyberwarfare

BKTacticalKattacks

CKUser-specificKattacks

DKSociopoliticalKattacksK-KANSWER-D



WhatKtypeKofKattackKlocksKaKuser'sKdesktopKandKthenKrequiresKaKpaymentKtoKunlockKit?



AKPhishing

, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2025ACTUALEXAM400QUESTIONS
AND CORRECTDETAILED ANSWERS WITH RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
BKKeylogger

CKRansomware

DKDenial-of-serviceK-KANSWER-C



WhatKisKaKcountermeasureKagainstKvariousKformsKofKXMLKandKXMLKpathKinjectionKattacks?



AKXMLKnameKwrapping

BKXMLKunicodeKencoding

CKXMLKattributeKescaping

DKXMLKdistinguishedKnameKescapingK-KANSWER-C



WhichKcountermeasureKisKusedKtoKmitigateKSQLKinjectionKattacks?



AKSQLKFirewall

BKProjectedKbijection

CKQueryKparameterization

DKProgressiveKColdFusionK-KANSWER-C



WhatKisKanKappropriateKcountermeasureKtoKanKescalationKofKprivilegeKattack?



AKEnforcingKstrongKpasswordKpolicies

BKUsingKstandardKencryptionKalgorithmsKandKcorrectKkeyKsizes

CKEnablingKtheKauditingKandKloggingKofKallKadministrationKactivities

DKRestrictingKaccessKtoKspecificKoperationsKthroughKrole-basedKaccessKcontrolsK-KANSWER-D

, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2025ACTUALEXAM400QUESTIONS
AND CORRECTDETAILED ANSWERS WITH RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
WhichKconfigurationKmanagementKsecurityKcountermeasureKimplementsKleastKprivilegeKaccessKcontrol?



AKFollowingKstrongKpasswordKpoliciesKtoKrestrictKaccess

BKRestrictingKfileKaccessKtoKusersKbasedKonKauthorization

CKAvoidingKclearKtextKformatKforKcredentialsKandKsensitiveKdata

DKUsingKAESK256KencryptionKforKcommunicationsKofKaKsensitiveKnatureK-KANSWER-B



WhichKphaseKofKtheKsoftwareKdevelopmentKlifeKcycleK(SDL/SDLC)KwouldKbeKusedKtoKdetermineKtheKmi
nimumKsetKofKprivilegesKrequiredKtoKperformKtheKtargetedKtaskKandKrestrictKtheKuserKtoKaKdomainKwithK
thoseKprivileges?



AKDesign

BKDeploy

CKDevelopment

DKImplementationK-KANSWER-A



WhichKleastKprivilegeKmethodKisKmoreKgranularKinKscopeKandKgrantsKspecificKprocessesKonlyKtheKprivile
gesKnecessaryKtoKperformKcertainKrequiredKfunctions,KinsteadKofKgrantingKthemKunrestrictedKaccessKtoK
theKsystem?



AKEntitlementKprivilege

BKSeparationKofKprivilege

CKAggregationKofKprivileges

DKSegregationKofKresponsibilitiesK-KANSWER-B



WhyKdoesKprivilegeKcreepKposeKaKpotentialKsecurityKrisk?

, WGUMASTER'SCOURSEC706-SECURESOFTWARE
DESIGNEXAMLATEST2025ACTUALEXAM400QUESTIONS
AND CORRECTDETAILED ANSWERS WITH RATIONALES
(VERIFIED ANSWERS) |ALREADY GRADED A+
AKUserKprivilegesKdoKnotKmatchKtheirKjobKrole.

BKWithKmoreKprivileges,KthereKareKmoreKresponsibilities.

CKAuditingKwillKshowKaKmismatchKbetweenKindividualKresponsibilitiesKandKtheirKaccessKrights.

DKUsersKhaveKmoreKprivilegesKthanKtheyKneedKandKmayKperformKactionsKoutsideKtheirKjobKdescription.K
-KANSWER-D



AKsystemKdeveloperKisKimplementingKaKnewKsalesKsystem.KTheKsystemKdeveloperKisKconcernedKthatKuna
uthorizedKindividualsKmayKbeKableKtoKviewKsensitiveKcustomerKfinancialKdata.



WhichKfamilyKofKnonfunctionalKrequirementsKshouldKbeKconsideredKasKpartKofKtheKacceptanceKcriteria?



AKIntegrity

BKAvailability

CKNonrepudition

DKConfidentialityK-KANSWER-D



AKprojectKmanagerKisKgivenKtheKtaskKtoKcomeKupKwithKnonfunctionalKacceptanceKcriteriaKrequirementsK
forKbusinessKownersKasKpartKofKaKprojectKdelivery.



WhichKnonfunctionalKrequirementKshouldKbeKappliedKtoKtheKacceptanceKcriteria?



AKGiveKsearchKoptionsKtoKusers

BKEvaluateKtestKexecutionKresults

CKDivideKusersKintoKgroupsKandKgiveKthemKseparateKrights

DKDevelopKsoftwareKthatKkeepsKdownwardKcompatibilityKintactK-KANSWER-B