WGU D487 Secure Software Design Objective Assessment 180 Questions SDLC Threat Modeling Cryptography Q&A 2026 Western Governors University

This document contains a comprehensive set of approximately 180 exam-style questions with verified answers for WGU D487 Secure Software Design Objective Assessment . It covers essential secure software development concepts including SDLC and SDL processes, threat modeling methodologies (STRIDE, DREAD, PASTA), secure coding practices, cryptography, vulnerability management, and security testing techniques such as static and dynamic analysis. Early sections (pages 1–3) introduce foundational security frameworks like BSIMM and ISO/IEC 27001, while mid-sections (pages 4–10) focus on secure coding, architecture analysis, and testing strategies. Later sections (pages 11–15) emphasize real-world vulnerabilities, mitigation techniques, and post-release security processes. The material is highly relevant for students enrolled in cybersecurity, software engineering, information technology, and secure software development courses. It is especially useful for WGU students taking D487, as well as learners preparing for objective assessments, certification exams, or careers in application security, DevSecOps, and secure system design. It also benefits professionals seeking to strengthen knowledge in threat modeling, vulnerability remediation, and secure coding standards. This study guide aligns with industry-standard resources such as OWASP Secure Coding Practices, NIST Secure Software Development Framework (SSDF), and Software Security: Building Security In by Gary McGraw. It incorporates key concepts like defense in depth (page 9), least privilege (page 3), and parameterized queries to prevent SQL injection (page 10). The document serves as a complete and in-depth preparation resource, combining theoretical foundations with practical, scenario-based security applications to enhance understanding and exam performance. Keywords: secure software design, SDLC security, threat modeling STRIDE, DREAD methodology, PASTA framework, cryptography practices, static analysis, dynamic analysis, vulnerability management, secure coding standards, OWASP principles, defense in depth, least privilege, SQL injection prevention, cybersecurity exam prep