VERIFIED ANSWERS ALL
ANSWERED / WGU – D487
OBJECTIVE ASSESSMENT FINAL EXAM
What are the three core elements of security - ✔✔✔ Correct Answer > confidentiality,
integrity, and availability
8 phases of the SDLC - ✔✔✔ Correct Answer > planning, requirements, design,
implementation, testing, deployment, maintenance and end of life
What is software security - ✔✔✔ Correct Answer > Security that deals with securing
the foundational programmatic logic of the underlying software
Which part of the CIA keeps unauthorized users from accessing confidential
information - ✔✔✔ Correct Answer > Confidentiality
BSIMM - ✔✔✔ Correct Answer > a study of real-world software security that allows
you to develop your software security over time
,Dynamic analysis - ✔✔✔ Correct Answer > analysis of computer software that is
performed when executing the program on a real or virtual processor in real time
Fuzz testing - ✔✔✔ Correct Answer > automated or semi-automated testing that
provides invalid, unexpected, or random data to the computer program.
Measure model - ✔✔✔ Correct Answer > A set of data security methods that
developers take to protect against vulnerabilities
Metric model - ✔✔✔ Correct Answer > allows organizations to determine the
effectiveness of their security controls
Deployment Phase (SDLC) - ✔✔✔ Correct Answer > Security is pushed out
Design Phase (SDLC) - ✔✔✔ Correct Answer > Requirements are prepared for the
technical design
Implementation Phase - ✔✔✔ Correct Answer > The resources involved in the
application from a known resource are determined
, Maintenance Phase - ✔✔✔ Correct Answer > Ongoing security monitoring is
implemented
Planning Phase of SDLC - ✔✔✔ Correct Answer > vision and next steps are created
Secure code - ✔✔✔ Correct Answer > a principle design in coding that refers to code
security best practices, safeguards, and protection against vulnerabilities
Threat modeling - ✔✔✔ Correct Answer > a structured process to protect against
vulnerabilities
OWASP - ✔✔✔ Correct Answer > A flexible and prospective framework to build
security into your software development organization
Static analysis - ✔✔✔ Correct Answer > The analysis of computer software that is
performed without executing programs
Computer Vulnerabilities and Exposures - ✔✔✔ Correct Answer > A list of
information that aims to provide common names for publicly known security
vulnerabilities What are the three primary tools basic to the SDLC - ✔✔✔ Correct
Answer > Fuzz testing, static analysis, and dynamic analysis testing