D Nh h A
IGM STAEM
EX R'LSACTOEU
STRS2E02C470A6CT-h U
SEACLUERXEAM
SO4F0T0
WQAU
RESTIONS
WGU MASTER'S COURSE C706 - h h h h
SECURE SOFTWARE DESIGN EXAM LATEST 2024 ACTUAL EX
h h h h h h h h
AM 400 QUESTIONS AND CORRECT DETAILED ANSWERS WI
h h h h h h h
TH RATIONALES (VERIFIED ANSWERS) | GRADED A+
h h h h h h
Whathishahstephforhconstructinghahthreathmodelhforhahprojecthwhenhusinghpracticalhriskhanalysis?
AhAlignhyourhbusinesshgoals
BhApplyhengineeringhmethods
ChEstimatehprobabilityhofhprojecthtime
DhMakehahlisthofhwhathyouharehtryinghtohprotecth-hANSWER-D
Whichhcyberhthreatsharehtypicallyhsurgicalhbyhnature,hhavehhighlyhspecifichtargeting,handharehtechnolog
icallyhsophisticated?
Ah Tacticalh attacks
Bh Criminalh attacks
ChStrategichattacks
DhUser-specifichattacksh-hANSWER-A
Whichhtypehofhcyberattacksharehoftenhintendedhtohelevatehawarenesshofhahtopic?
Ah Cyberwarfare
BhTacticalhattacks
ChUser-specifichattacks
DhSociopoliticalhattacksh-hANSWER-D
Whathtypehofhattackhlockshahuser'shdesktophandhthenhrequireshahpaymenthtohunlockhit?
,WEGSU
D Nh h A
IGM STAEM
EX R'LSACTOEU
STRS2E02C470A6CT-h U
SEACLUERXEAM
SO4F0T0
WQAU
RESTIONS
AhPhishing
,WEGSU
D Nh h A
IGM STAEM
EX R'LSACTOEU
STRS2E02C470A6CT-h U
SEACLUERXEAM
SO4F0T0
WQAU
RESTIONS
BhKeylogger
ChRansomware
DhDenial-of-serviceh-hANSWER-C
WhathishahcountermeasurehagainsthvarioushformshofhXMLhandhXMLhpathhinjectionhattacks?
AhXMLh nameh wrapping
BhXMLhunicodehencoding
ChXMLhattributehescaping
DhXMLhdistinguishedhnamehescapingh-hANSWER-C
WhichhcountermeasurehishusedhtohmitigatehSQLhinjectionhattacks?
AhSQLhFirewall
BhProjectedhbijection
ChQueryhparameterization
DhProgressivehColdFusionh-hANSWER-C
Whathishanhappropriatehcountermeasurehtohanhescalationhofhprivilegehattack?
AhEnforcinghstronghpasswordhpolicies
BhUsinghstandardhencryptionhalgorithmshandhcorrecthkeyhsizes
ChEnablinghthehauditinghandhlogginghofhallhadministrationhactivities
DhRestrictinghaccesshtohspecifichoperationshthroughhrole-basedhaccesshcontrolsh-hANSWER-D
, WEGSU
D Nh h A
IGM STAEM
EX R'LSACTOEU
STRS2E02C470A6CT-h U
SEACLUERXEAM
SO4F0T0
WQAU
RESTIONS
Whichhconfigurationhmanagementhsecurityhcountermeasurehimplementshleasthprivilegehaccesshcontrol?
AhFollowinghstronghpasswordhpolicieshtohrestricthaccess
BhRestrictinghfilehaccesshtohusershbasedhonhauthorization
ChAvoidinghclearhtexthformathforhcredentialshandhsensitivehdata
DhUsinghAESh256hencryptionhforhcommunicationshofhahsensitivehnatureh-hANSWER-B
Whichhphasehofhthehsoftwarehdevelopmenthlifehcycleh(SDL/SDLC)hwouldhbehusedhtohdeterminehthehmi
nimumhsethofhprivilegeshrequiredhtohperformhthehtargetedhtaskhandhrestricththehuserhtohahdomainhwithh
thosehprivileges?
AhDesign
BhDeploy
ChDevelopment
DhImplementationh-hANSWER-A
Whichhleasthprivilegehmethodhishmorehgranularhinhscopehandhgrantshspecifichprocesseshonlyhthehprivil
egeshnecessaryhtohperformhcertainhrequiredhfunctions,hinsteadhofhgrantinghthemhunrestrictedhaccessht
ohthehsystem?
AhEntitlementhprivilege
BhSeparationhofhprivilege
ChAggregationhofhprivileges
DhSegregationhofhresponsibilitiesh-hANSWER-B
Whyhdoeshprivilegehcreephposehahpotentialhsecurityhrisk?