D487: Secure Software Design Objective Assessment
2026-2027 Test Bank Exam 1 \Actual Practice Questions
& Correct Verified Answers\Assured Success\GRADED
A+\WGU D487 Secure Software Design OA Prep Test
What SDL security assessment deliverable is used as an input to an SDL architecture
process?
SDL project outline
Certification requirements
Product risk profile
Threat profile
Threat profile
Threat profiles created in the Security Assessment phase are used to build the
environment in which the product will operate and will include potential threats in
order to determine how to avoid them in the final application.
,When a software application handles personally identifiable information (PII) data,
what will be the Privacy Impact Rating?
P0: No privacy risk
P2: Moderate privacy risk
P3: Low privacy risk
P1: High privacy risk
P1: High privacy risk
High privacy risk occurs when the product or service stores include ongoing
transfers of anonymous data.
Which phase in an SDLC helps to define the problem and scope of any existing
systems and determine the objectives of new systems?
Requirements
Design
Planning
Testing
Planning
The planning stage sets the project schedule and looks at the big picture.
What happens during a dynamic code review?
Programmers monitor system memory, functional behavior, response times, and
overall performance.
Customers perform tests to check software meets requirements.
An analysis of computer programs without executing them is
performed. Input fields are supplied with unexpected input and
tested.
Programmers monitor system memory, functional behavior, response times, and
overall performance.
,How should you store your application user credentials in your application
database? Use application logic to encrypt credentials
Store credentials as clear text
Store credentials using Base 64 encoded
Store credentials using salted hashes
Store credentials using salted hashes
Hashing is a one-way process that converts a password to ciphertext using hash
algorithms. Password salting adds random characters before or after a password
prior to hashing to obfuscate the actual password.
Which software methodology resembles an assembly-line
approach? V-model
Agile model
Iterative
model
Waterfall
model
Waterfall model
Waterfall model is a continuous software development model in which the
development steps flow steadily downwards.
, Which software methodology approach provides faster time to market and higher
business value?
Iterative model
Waterfall model
V-model
Agile model
Agile model
In the agile model, projects are divided into small incremental builds that provide
working software at the end of each iteration and adds value to business.
In Scrum methodology, who is responsible for making decisions on the
requirements? Scrum Team
Product
Owner
ScrumMaster
Technical
Lead
Product Owner
The Product Owner is responsible for requirements/backlog items and prioritizing
them.
2026-2027 Test Bank Exam 1 \Actual Practice Questions
& Correct Verified Answers\Assured Success\GRADED
A+\WGU D487 Secure Software Design OA Prep Test
What SDL security assessment deliverable is used as an input to an SDL architecture
process?
SDL project outline
Certification requirements
Product risk profile
Threat profile
Threat profile
Threat profiles created in the Security Assessment phase are used to build the
environment in which the product will operate and will include potential threats in
order to determine how to avoid them in the final application.
,When a software application handles personally identifiable information (PII) data,
what will be the Privacy Impact Rating?
P0: No privacy risk
P2: Moderate privacy risk
P3: Low privacy risk
P1: High privacy risk
P1: High privacy risk
High privacy risk occurs when the product or service stores include ongoing
transfers of anonymous data.
Which phase in an SDLC helps to define the problem and scope of any existing
systems and determine the objectives of new systems?
Requirements
Design
Planning
Testing
Planning
The planning stage sets the project schedule and looks at the big picture.
What happens during a dynamic code review?
Programmers monitor system memory, functional behavior, response times, and
overall performance.
Customers perform tests to check software meets requirements.
An analysis of computer programs without executing them is
performed. Input fields are supplied with unexpected input and
tested.
Programmers monitor system memory, functional behavior, response times, and
overall performance.
,How should you store your application user credentials in your application
database? Use application logic to encrypt credentials
Store credentials as clear text
Store credentials using Base 64 encoded
Store credentials using salted hashes
Store credentials using salted hashes
Hashing is a one-way process that converts a password to ciphertext using hash
algorithms. Password salting adds random characters before or after a password
prior to hashing to obfuscate the actual password.
Which software methodology resembles an assembly-line
approach? V-model
Agile model
Iterative
model
Waterfall
model
Waterfall model
Waterfall model is a continuous software development model in which the
development steps flow steadily downwards.
, Which software methodology approach provides faster time to market and higher
business value?
Iterative model
Waterfall model
V-model
Agile model
Agile model
In the agile model, projects are divided into small incremental builds that provide
working software at the end of each iteration and adds value to business.
In Scrum methodology, who is responsible for making decisions on the
requirements? Scrum Team
Product
Owner
ScrumMaster
Technical
Lead
Product Owner
The Product Owner is responsible for requirements/backlog items and prioritizing
them.
