WGU D487 EXAM | SECURE SOFTWARE
DESIGN EXAM | CORRECTLY ANSWERED
AND RATED A+ | 2025/2026 GUIDE
What SDL security assessment deliverable is used as an input to an
SDL architecture process? - Correct Answer - threat profile
What is alpha level testing? - Correct Answer - testing done by the
developers themselves
What is beta level testing? - Correct Answer - testing done by those not
familiar with the actual development of the system
What is black box testing? - Correct Answer - tests from an external
perspective with no prior knowledge of the software
What is the third phase of the security development life cycle, in which
you analyze and test software to determine security and privacy issues
as you make informed decisions moving forward with your software? -
Correct Answer - A3 Design and Development
What are external resources? - Correct Answer - resources hired on a
temporary basis to come into a project, test the application, and report
findings
,What are functional testing scripts? - Correct Answer - step-by-step
instructions for a specific scenario or situation
What are gray box testing? - Correct Answer - analyzes the source code
for the software to help design the test cases
What are internal resources? - Correct Answer - resources from the
company's organization
What are secure testing scripts? - Correct Answer - scripts created
specifically for the application being tested
What is white box testing? - Correct Answer - tests from an internal
perspective with full knowledge of the software
Which software security testing technique tests the software from an
external perspective? - Correct Answer - black box
What testing tests with no prior knowledge of the software? During this
phase, only binary executable or intermediate byte code is analyzed. -
Correct Answer - black box
, What is phase four of the SDL? - Correct Answer - A4 Design and
Development CONT
What is an open-source platform that can perform automatic reviews
with static analysis of code to detect bugs, code smells, and security
vulnerabilities in over 25 programming languages. - Correct Answer -
SonarQube
What is analysis of computer software that is performed without actually
executing programs? - Correct Answer - static anaylysis
What identifies inputs and supplies those to the scanning components of
the security tool? - Correct Answer - Spider
Type of request to merge your code into another branch... - Correct
Answer - pull request
What silently analyzes all the hypertext transfer protocol (HTTP)
requests and responses passing through the web application security
tool? - Correct Answer - passive scanner
Type of test done by the development tester to continually assess the
quality of his or her work... - Correct Answer - exploratory test
DESIGN EXAM | CORRECTLY ANSWERED
AND RATED A+ | 2025/2026 GUIDE
What SDL security assessment deliverable is used as an input to an
SDL architecture process? - Correct Answer - threat profile
What is alpha level testing? - Correct Answer - testing done by the
developers themselves
What is beta level testing? - Correct Answer - testing done by those not
familiar with the actual development of the system
What is black box testing? - Correct Answer - tests from an external
perspective with no prior knowledge of the software
What is the third phase of the security development life cycle, in which
you analyze and test software to determine security and privacy issues
as you make informed decisions moving forward with your software? -
Correct Answer - A3 Design and Development
What are external resources? - Correct Answer - resources hired on a
temporary basis to come into a project, test the application, and report
findings
,What are functional testing scripts? - Correct Answer - step-by-step
instructions for a specific scenario or situation
What are gray box testing? - Correct Answer - analyzes the source code
for the software to help design the test cases
What are internal resources? - Correct Answer - resources from the
company's organization
What are secure testing scripts? - Correct Answer - scripts created
specifically for the application being tested
What is white box testing? - Correct Answer - tests from an internal
perspective with full knowledge of the software
Which software security testing technique tests the software from an
external perspective? - Correct Answer - black box
What testing tests with no prior knowledge of the software? During this
phase, only binary executable or intermediate byte code is analyzed. -
Correct Answer - black box
, What is phase four of the SDL? - Correct Answer - A4 Design and
Development CONT
What is an open-source platform that can perform automatic reviews
with static analysis of code to detect bugs, code smells, and security
vulnerabilities in over 25 programming languages. - Correct Answer -
SonarQube
What is analysis of computer software that is performed without actually
executing programs? - Correct Answer - static anaylysis
What identifies inputs and supplies those to the scanning components of
the security tool? - Correct Answer - Spider
Type of request to merge your code into another branch... - Correct
Answer - pull request
What silently analyzes all the hypertext transfer protocol (HTTP)
requests and responses passing through the web application security
tool? - Correct Answer - passive scanner
Type of test done by the development tester to continually assess the
quality of his or her work... - Correct Answer - exploratory test
