WGUuD487uSECUREuSOFTWAREuDESIGN
WGU D487 SECURE SOFTWARE DESIGN
u u u u u
EXAM 2024/2025 QUESTIONS AND ANSW
u u u u
ERS
Whichusecureucodingubestupracticeuensuresuservers,uframeworks,uandusystemucomponentsuareuallurunnin
gutheulatestuapproveduversions?
Systemuconfiguration
Whichusecureucodingubestupracticeusaysutouuseuparameterizeduqueries,uencrypteduconnectionustring
sustoreduinuseparateuconfigurationufiles,uandustrongupasswordsuorumulti-factoruauthentication?
Databaseusecurity
Whichusecureucodingubestupracticeusaysuthatualluinformationupassedutouotherusystemsushouldub
euencrypted?
Communicationusecurity
,WGUuD487uSECUREuSOFTWAREuDESIGN
eamumembersuareubeinguintroduceduduringusprintuzerouinutheuprojectukickoffumeeting.uTheupersonubein
guintroduceduisuaumemberuofutheuscrumuteam,uresponsibleuforuwritingufeatureulogicuanduattendingusprintu
ceremonies.uWhichuroleuisutheuteamumemberuplaying?
Softwareudeveloper
Whatuisuaustudyuofureal-
worldusoftwareusecurityuinitiativesuorganizedusoucompaniesucanumeasureutheiruinitiativesuanduunderst
anduhowutouevolveuthemuoverutime?,
BuildinguSecurityuInuMaturityuModelu(BSIMM)
Whatuisutheuanalysisuofucomputerusoftwareuthatuisuperformeduwithoutuexecutinguprograms
?uStaticuanalysis
WhichuInternationaluOrganizationuforuStandardizationu(ISO)ustandarduisutheubenchmarkuforuinformatio
nusecurityutoday?
ISO/IECu27001.
Whatuisutheuanalysisuofucomputerusoftwareuthatuisuperformedubyuexecutinguprogramsuonuaurealuoruvirtua
luprocessoruinurealutime?,
Dynamicuanalysis
Whichupersonuisuresponsibleuforudesigning,uplanning,uanduimplementingusecureucodingupracticesuan
dusecurityutestingumethodologies?
Softwareusecurityuarchitect
, WGUuD487uSECUREuSOFTWAREuDESIGN
Aucompanyuisupreparingutouadduaunewufeatureutouitsuflagshipusoftwareuproduct.uTheunewufeatureuisusimila
rutoufeaturesuthatuhaveubeenuaddeduinupreviousuyears,uandutheurequirementsuareuwell-
documented.uTheuprojectuisuexpectedutoulastuthreeutoufourumonths,uatuwhichutimeutheunewufeatureuwillub
eureleasedutoucustomers.uProjectuteamumembersuwillufocususolelyuonutheunewufeatureuuntilutheuprojectue
nds.uWhichusoftwareudevelopmentumethodologyuisubeinguused?
Waterfall
Aunewuproductuwillurequireuanuadministrationusectionuforuausmallunumberuofuusers.uNormaluusersuwillub
euableutouviewulimiteducustomeruinformationuandushouldunotuseeuadminufunctionalityuwithinutheuapplica
tion.uWhichuconceptuisubeinguused?
Principleuofuleastuprivilege
Theuscrumuteamuisuattendingutheirumorningumeeting,uwhichuisuscheduleduatutheubeginninguofutheuwor
kuday.uEachuteamumemberureportsuwhatutheyuaccomplisheduyesterday,uwhatutheyuplanutouaccomplishu
today,uanduifutheyuhaveuanyuimpedimentsuthatumayucauseuthemutoumissutheirudeliveryudeadline.uWhic
huscrumuceremonyuisutheuteamuparticipatinguin?
DailyuScrum
Whatuisuaulistuofuinformationusecurityuvulnerabilitiesuthatuaimsutouprovideunamesuforupubliclyuknow
nuproblems?
Commonucomputeruvulnerabilitiesuanduexposuresu(CVE)
Whichusecureucodingubestupracticeuusesuwell-
tested,upubliclyuavailableualgorithmsutouhideuproductudataufromuunauthorizeduaccess?
WGU D487 SECURE SOFTWARE DESIGN
u u u u u
EXAM 2024/2025 QUESTIONS AND ANSW
u u u u
ERS
Whichusecureucodingubestupracticeuensuresuservers,uframeworks,uandusystemucomponentsuareuallurunnin
gutheulatestuapproveduversions?
Systemuconfiguration
Whichusecureucodingubestupracticeusaysutouuseuparameterizeduqueries,uencrypteduconnectionustring
sustoreduinuseparateuconfigurationufiles,uandustrongupasswordsuorumulti-factoruauthentication?
Databaseusecurity
Whichusecureucodingubestupracticeusaysuthatualluinformationupassedutouotherusystemsushouldub
euencrypted?
Communicationusecurity
,WGUuD487uSECUREuSOFTWAREuDESIGN
eamumembersuareubeinguintroduceduduringusprintuzerouinutheuprojectukickoffumeeting.uTheupersonubein
guintroduceduisuaumemberuofutheuscrumuteam,uresponsibleuforuwritingufeatureulogicuanduattendingusprintu
ceremonies.uWhichuroleuisutheuteamumemberuplaying?
Softwareudeveloper
Whatuisuaustudyuofureal-
worldusoftwareusecurityuinitiativesuorganizedusoucompaniesucanumeasureutheiruinitiativesuanduunderst
anduhowutouevolveuthemuoverutime?,
BuildinguSecurityuInuMaturityuModelu(BSIMM)
Whatuisutheuanalysisuofucomputerusoftwareuthatuisuperformeduwithoutuexecutinguprograms
?uStaticuanalysis
WhichuInternationaluOrganizationuforuStandardizationu(ISO)ustandarduisutheubenchmarkuforuinformatio
nusecurityutoday?
ISO/IECu27001.
Whatuisutheuanalysisuofucomputerusoftwareuthatuisuperformedubyuexecutinguprogramsuonuaurealuoruvirtua
luprocessoruinurealutime?,
Dynamicuanalysis
Whichupersonuisuresponsibleuforudesigning,uplanning,uanduimplementingusecureucodingupracticesuan
dusecurityutestingumethodologies?
Softwareusecurityuarchitect
, WGUuD487uSECUREuSOFTWAREuDESIGN
Aucompanyuisupreparingutouadduaunewufeatureutouitsuflagshipusoftwareuproduct.uTheunewufeatureuisusimila
rutoufeaturesuthatuhaveubeenuaddeduinupreviousuyears,uandutheurequirementsuareuwell-
documented.uTheuprojectuisuexpectedutoulastuthreeutoufourumonths,uatuwhichutimeutheunewufeatureuwillub
eureleasedutoucustomers.uProjectuteamumembersuwillufocususolelyuonutheunewufeatureuuntilutheuprojectue
nds.uWhichusoftwareudevelopmentumethodologyuisubeinguused?
Waterfall
Aunewuproductuwillurequireuanuadministrationusectionuforuausmallunumberuofuusers.uNormaluusersuwillub
euableutouviewulimiteducustomeruinformationuandushouldunotuseeuadminufunctionalityuwithinutheuapplica
tion.uWhichuconceptuisubeinguused?
Principleuofuleastuprivilege
Theuscrumuteamuisuattendingutheirumorningumeeting,uwhichuisuscheduleduatutheubeginninguofutheuwor
kuday.uEachuteamumemberureportsuwhatutheyuaccomplisheduyesterday,uwhatutheyuplanutouaccomplishu
today,uanduifutheyuhaveuanyuimpedimentsuthatumayucauseuthemutoumissutheirudeliveryudeadline.uWhic
huscrumuceremonyuisutheuteamuparticipatinguin?
DailyuScrum
Whatuisuaulistuofuinformationusecurityuvulnerabilitiesuthatuaimsutouprovideunamesuforupubliclyuknow
nuproblems?
Commonucomputeruvulnerabilitiesuanduexposuresu(CVE)
Whichusecureucodingubestupracticeuusesuwell-
tested,upubliclyuavailableualgorithmsutouhideuproductudataufromuunauthorizeduaccess?
