WGUgD487gSECUREgSOFTWAREgDESIG
N
WGU D487 SECURE SOFTWARE DESIGN E
g g g g g
XAM 1 2025 SPRING- g g g
SUMMER VERIFIED QUESTIONS AND ANS
g g g g
WERS WITH RATIONALE g g
Whatgaregthegtwogcommongbestgprinciplesgofgsoftwaregapplicationsgingthegdevelopm
entgprocess?gChooseg2ganswers.
QualitygcodegS
ecuregcode
Informationgsecurity
Integrityg Availabili
g
ty
QualitygcodegS
ecuregcode
"Qualitygcode"gisgcorrect.gQualitygcodegisgefficientgcodegthatgisgeasygtogmaintaingandg
reusable.
"Securegcode"gisgcorrect.gSecuregcodegauthorizesgandgauthenticatesgeverygusergtransa
ction,glogsgthegtransaction,gandgdeniesgallgunauthorizedgrequisitions.
,WGUgD487gSECUREgSOFTWAREgDESIG
N
Whatgensuresgthatgtheguserghasgthegappropriategrolegandgprivilegegtogviewgdata?gAuth
entication
Multi-
factorgauthenticationgEncry
ption
InformationgsecuritygAuth
orizationgAuthorization
Authorizationgensuresgaguser'sginformationgandgcredentialsgaregapprovedgbygthegsyst
em.
Whichgsecurityggoalgisgdefinedgbyg"guardinggagainstgimproperginformation
gmodificationgorgdestructiongandgensuringginformationgnon-
repudiationgandgauthenticity"?
IntegritygQualit
ygAvailabilityg
ReliabilitygInte
grity
Thegdatagmustgremaingunchangedgbygunauthorizedgusersgandgremaingreliablegfromgth
egdatagentrygpointgtogthegdatabasegandgback.
,WGUgD487gSECUREgSOFTWAREgDESIG
N
WhichgphasegingangSDLCghelpsgtogdefinegthegproblemgandgscopegofganygexistinggsys
temsgandgdeterminegthegobjectivesgofgnewgsystems?
Requirementsg
DesigngPlannin
ggTestinggPlann
ing
Thegplanninggstagegsetsgthegprojectgschedulegandglooksgatgthegbiggpicture.
Whatghappensgduringgagdynamicgcodegreview?
Programmersgmonitorgsystemgmemory,gfunctionalgbehavior,gresponsegtimes,gandgov
erallgperformance.
Customersgperformgtestsgtogcheckgsoftwaregmeetsgrequirements.
Anganalysisgofgcomputergprogramsgwithoutgexecutinggthemgisgperformed.gI
nputgfieldsgaregsuppliedgwithgunexpectedginputgandgtested.
Programmersgmonitorgsystemgmemory,gfunctionalgbehavior,gresponsegtimes,gandgov
erallgperformance.
Howgshouldgyougstoregyourgapplicationgusergcredentialsgingyourgapplicationgdatabase
?
, WGUgD487gSECUREgSOFTWAREgDESIG
N
UsegapplicationglogicgtogencryptgcredentialsgStor
egcredentialsgasgcleargtext
StoregcredentialsgusinggBaseg64gencodedg
StoregcredentialsgusinggsaltedghashesgStor
egcredentialsgusinggsaltedghashes
Hashinggisgagone-
waygprocessgthatgconvertsgagpasswordgtogciphertextgusingghashgalgorithms.gPass
wordgsaltinggaddsgrandomgcharactersgbeforegorgaftergagpasswordgpriorgtoghashing
gtogobfuscategthegactualgpassword.
Whichgsoftwaregmethodologygresemblesgangassembly-
linegapproach?gV-model
AgilegmodelgIte
rativegmodelgW
aterfallgmodelg
Waterfallgmodel
Waterfallgmodelgisgagcontinuousgsoftwaregdevelopmentgmodelgingwhichgthegdevelop
mentgstepsgflowgsteadilygdownwards.
Whichgsoftwaregmethodologygapproachgprovidesgfastergtimegtogmarketgandghighergb
usinessgvalue?
N
WGU D487 SECURE SOFTWARE DESIGN E
g g g g g
XAM 1 2025 SPRING- g g g
SUMMER VERIFIED QUESTIONS AND ANS
g g g g
WERS WITH RATIONALE g g
Whatgaregthegtwogcommongbestgprinciplesgofgsoftwaregapplicationsgingthegdevelopm
entgprocess?gChooseg2ganswers.
QualitygcodegS
ecuregcode
Informationgsecurity
Integrityg Availabili
g
ty
QualitygcodegS
ecuregcode
"Qualitygcode"gisgcorrect.gQualitygcodegisgefficientgcodegthatgisgeasygtogmaintaingandg
reusable.
"Securegcode"gisgcorrect.gSecuregcodegauthorizesgandgauthenticatesgeverygusergtransa
ction,glogsgthegtransaction,gandgdeniesgallgunauthorizedgrequisitions.
,WGUgD487gSECUREgSOFTWAREgDESIG
N
Whatgensuresgthatgtheguserghasgthegappropriategrolegandgprivilegegtogviewgdata?gAuth
entication
Multi-
factorgauthenticationgEncry
ption
InformationgsecuritygAuth
orizationgAuthorization
Authorizationgensuresgaguser'sginformationgandgcredentialsgaregapprovedgbygthegsyst
em.
Whichgsecurityggoalgisgdefinedgbyg"guardinggagainstgimproperginformation
gmodificationgorgdestructiongandgensuringginformationgnon-
repudiationgandgauthenticity"?
IntegritygQualit
ygAvailabilityg
ReliabilitygInte
grity
Thegdatagmustgremaingunchangedgbygunauthorizedgusersgandgremaingreliablegfromgth
egdatagentrygpointgtogthegdatabasegandgback.
,WGUgD487gSECUREgSOFTWAREgDESIG
N
WhichgphasegingangSDLCghelpsgtogdefinegthegproblemgandgscopegofganygexistinggsys
temsgandgdeterminegthegobjectivesgofgnewgsystems?
Requirementsg
DesigngPlannin
ggTestinggPlann
ing
Thegplanninggstagegsetsgthegprojectgschedulegandglooksgatgthegbiggpicture.
Whatghappensgduringgagdynamicgcodegreview?
Programmersgmonitorgsystemgmemory,gfunctionalgbehavior,gresponsegtimes,gandgov
erallgperformance.
Customersgperformgtestsgtogcheckgsoftwaregmeetsgrequirements.
Anganalysisgofgcomputergprogramsgwithoutgexecutinggthemgisgperformed.gI
nputgfieldsgaregsuppliedgwithgunexpectedginputgandgtested.
Programmersgmonitorgsystemgmemory,gfunctionalgbehavior,gresponsegtimes,gandgov
erallgperformance.
Howgshouldgyougstoregyourgapplicationgusergcredentialsgingyourgapplicationgdatabase
?
, WGUgD487gSECUREgSOFTWAREgDESIG
N
UsegapplicationglogicgtogencryptgcredentialsgStor
egcredentialsgasgcleargtext
StoregcredentialsgusinggBaseg64gencodedg
StoregcredentialsgusinggsaltedghashesgStor
egcredentialsgusinggsaltedghashes
Hashinggisgagone-
waygprocessgthatgconvertsgagpasswordgtogciphertextgusingghashgalgorithms.gPass
wordgsaltinggaddsgrandomgcharactersgbeforegorgaftergagpasswordgpriorgtoghashing
gtogobfuscategthegactualgpassword.
Whichgsoftwaregmethodologygresemblesgangassembly-
linegapproach?gV-model
AgilegmodelgIte
rativegmodelgW
aterfallgmodelg
Waterfallgmodel
Waterfallgmodelgisgagcontinuousgsoftwaregdevelopmentgmodelgingwhichgthegdevelop
mentgstepsgflowgsteadilygdownwards.
Whichgsoftwaregmethodologygapproachgprovidesgfastergtimegtogmarketgandghighergb
usinessgvalue?
