D487 SECURE SOFTWARE DESIGN EXAM
PAPER 2026 QUESTIONS WITH ANSWERS
GRADED A+
◉ Software security champion. Answer: a developer with an interest
in security who helps amplify the security message at the team level
◉ waterfall methodology. Answer: a sequential, activity-based
process in which each phase in the SDLC is performed sequentially
from planning through implementation and maintenance
◉ Agile Development. Answer: A software development
methodology that delivers functionality in rapid iterations,
measured in weeks, requiring frequent communication,
development, testing, and delivery.
◉ Scrum. Answer: an agile project management framework that
helps teams structure and manage their work through a set of
values, principles, and practices
◉ Daily scrum. Answer: daily time-boxed event of 15 minutes, or
less, for the Development Team to re-plan the next day of
development work during a Sprint. Updates are reflected in the
Sprint Backlog.
, ◉ Sprint review. Answer: A meeting that occurs after each sprint to
show the product or process to stakeholders for approval and to
receive feedback.
◉ Sprint retrospective. Answer: an opportunity for the Scrum Team
to inspect itself and create a plan for improvements to be enacted
during the next Sprint.
◉ Sprint planning. Answer: A collaborative event in Scrum in which
the Scrum team plans the work for the current sprint.
◉ Scrum master. Answer: A person who ensures that the team is
productive, facilitates the daily Scrum, enables close cooperation
across all roles and functions, and removes barriers that prevent the
team from being effective
◉ White-box. Answer: A test where the tester has an in-depth
knowledge of the network and systems being tested, including
network diagrams, IP addresses, and even the source code of custom
applications.
◉ Gray-box. Answer: a testing technique in which the tester has
limited knowledge of the internal workings of the software.
PAPER 2026 QUESTIONS WITH ANSWERS
GRADED A+
◉ Software security champion. Answer: a developer with an interest
in security who helps amplify the security message at the team level
◉ waterfall methodology. Answer: a sequential, activity-based
process in which each phase in the SDLC is performed sequentially
from planning through implementation and maintenance
◉ Agile Development. Answer: A software development
methodology that delivers functionality in rapid iterations,
measured in weeks, requiring frequent communication,
development, testing, and delivery.
◉ Scrum. Answer: an agile project management framework that
helps teams structure and manage their work through a set of
values, principles, and practices
◉ Daily scrum. Answer: daily time-boxed event of 15 minutes, or
less, for the Development Team to re-plan the next day of
development work during a Sprint. Updates are reflected in the
Sprint Backlog.
, ◉ Sprint review. Answer: A meeting that occurs after each sprint to
show the product or process to stakeholders for approval and to
receive feedback.
◉ Sprint retrospective. Answer: an opportunity for the Scrum Team
to inspect itself and create a plan for improvements to be enacted
during the next Sprint.
◉ Sprint planning. Answer: A collaborative event in Scrum in which
the Scrum team plans the work for the current sprint.
◉ Scrum master. Answer: A person who ensures that the team is
productive, facilitates the daily Scrum, enables close cooperation
across all roles and functions, and removes barriers that prevent the
team from being effective
◉ White-box. Answer: A test where the tester has an in-depth
knowledge of the network and systems being tested, including
network diagrams, IP addresses, and even the source code of custom
applications.
◉ Gray-box. Answer: a testing technique in which the tester has
limited knowledge of the internal workings of the software.
