WGU C706 SECURE SOFTWARE DESIGN
ACTUAL TEST SCRIPT WITH SOLVED
QUESTIONS AND VERIFIED ANSWERS
●● Integrity
Answer: Ensures unauthorized persons or channels are not able to
modify the data. It is accomplished through the use of a message digest
or digital signatures.
●● Availability
Answer: The computing systems used to store and process information,
the security controls used to protect information, and the communication
channels used to access information must be functioning correctly.
Ensures system remains operational even in the event of a failure or an
attack. It is achieved by providing redundancy or fault tolerance for a
failure of a system and its components.
●● Ensure Confidentiality
Answer: Public Key Infrastructure (PKI) and Cryptography/Encryption
●● Ensure Availability
Answer: Offsite back-up and Redundancy
,●● Ensure Integrity
Answer: Hashing, Message Digest (MD5), non repudiation and digital
signatures
●● Software Architect
Answer: Moves analysis to implementation and analyzes the
requirements and use cases as activities to perform as part of the
development process; can also develop class diagrams.
●● Security Practitioner Roles
Answer: Release Manager,
Architect, Developer, Business Analyst/Project Manager
●● Release Manager
Answer: Deployment
●● Architect
Answer: Design
●● Developer
Answer: Coding
●● Business Analyst/Project Manager
, Answer: Requirements Gathering
●● Red Team
Answer: Teams of people familiar with the infrastructure of the company
and the languages of the software being developed. Their mission is to
kill the system as the developers build it.
●● Static Analysis
Answer: A method of computer program debugging that is done by
examining the code without executing the program. The process
provides an understanding of the code structure, and can help to ensure
that the code adheres to industry standards. It's also referred as code
review.
●● MD5 Hash
Answer: A widely used hash function producing a 128-bit hash value.
Initially designed to be used as a cryptographic hash function, it has
been found to suffer from extensive vulnerabilities. It can still be used as
a checksum to verify data integrity, but only against unintentional
corruption.
●● SHA-256 (Secure Hash Algorithm)
Answer: One of a number of cryptographic hash functions. A
cryptographic hash is like a signature for a text or a data file. Generates
an almost-unique, fixed size 32-byte
ACTUAL TEST SCRIPT WITH SOLVED
QUESTIONS AND VERIFIED ANSWERS
●● Integrity
Answer: Ensures unauthorized persons or channels are not able to
modify the data. It is accomplished through the use of a message digest
or digital signatures.
●● Availability
Answer: The computing systems used to store and process information,
the security controls used to protect information, and the communication
channels used to access information must be functioning correctly.
Ensures system remains operational even in the event of a failure or an
attack. It is achieved by providing redundancy or fault tolerance for a
failure of a system and its components.
●● Ensure Confidentiality
Answer: Public Key Infrastructure (PKI) and Cryptography/Encryption
●● Ensure Availability
Answer: Offsite back-up and Redundancy
,●● Ensure Integrity
Answer: Hashing, Message Digest (MD5), non repudiation and digital
signatures
●● Software Architect
Answer: Moves analysis to implementation and analyzes the
requirements and use cases as activities to perform as part of the
development process; can also develop class diagrams.
●● Security Practitioner Roles
Answer: Release Manager,
Architect, Developer, Business Analyst/Project Manager
●● Release Manager
Answer: Deployment
●● Architect
Answer: Design
●● Developer
Answer: Coding
●● Business Analyst/Project Manager
, Answer: Requirements Gathering
●● Red Team
Answer: Teams of people familiar with the infrastructure of the company
and the languages of the software being developed. Their mission is to
kill the system as the developers build it.
●● Static Analysis
Answer: A method of computer program debugging that is done by
examining the code without executing the program. The process
provides an understanding of the code structure, and can help to ensure
that the code adheres to industry standards. It's also referred as code
review.
●● MD5 Hash
Answer: A widely used hash function producing a 128-bit hash value.
Initially designed to be used as a cryptographic hash function, it has
been found to suffer from extensive vulnerabilities. It can still be used as
a checksum to verify data integrity, but only against unintentional
corruption.
●● SHA-256 (Secure Hash Algorithm)
Answer: One of a number of cryptographic hash functions. A
cryptographic hash is like a signature for a text or a data file. Generates
an almost-unique, fixed size 32-byte
