Exam (elaborations)
WGU D487 SECURE SW DESIGN QUESTIONS AND ANSWERS 2024
- Course
- Institution
WGU D487 SECURE SW DESIGN QUESTIONS AND ANSWERS 2024
[Show more]
Content preview
WGU D487 SECURE SW DESIGNA new application is released, and users perform initial testing on the
application.Which type of testing are the users performing? - ANSWERS-Beta
testing
What is a non-system-related component in software security testing attack
surface validation? - ANSWERS-Users
When an application's input validation is not handled properly, it could result in
which kind of vulnerabilities? - ANSWERS-SQL injection, cross-site scripting
What are the advantages of the conducting static code analysis? - ANSWERS-
access to the actual instructions the software will be guessing
What are the advantages of the conducting dynamic code analysis? - ANSWERS-
tests a specific operational deployment
What are the advantages of the conducting fuzz testing? - ANSWERS-testing in a
random approach
What are the advantages of the conducting manual source code review? -
ANSWERS-requires no supporting technology
,What is phase five of the SDL? - ANSWERS-A5 Ship
During what phase in the SDL do product and security teams work together to
verify that the product complies with security policies? - ANSWERS-A5 Ship
In what phase does the the security development life cycle takes place in the last
phase of the software development life cycle when the organization is preparing
to release the product? - ANSWERS-A5 Ship
What are the four phases of penetration testing? - ANSWERS-assess, identify,
evaluate and plan, and deploy.
What are scans that target security issues that are found outside the firewall? -
ANSWERS-external scans
What are scans that require software to log onto a system to scan it? - ANSWERS-
authenticated scans
What are scans to identify security issues that a malicious attacker could exploit
from inside the network? - ANSWERS-internal scans
What are scans to exploit a vulnerability when it is identified? - ANSWERS-
intrusive target search
, What are regulations regarding the software licensing of in-house products -
ANSWERS-open-source software license compliance
Which activity in the Ship (A5) phase of the security development cycle sets
requirements for quality gates that must be met before release? - ANSWERS-A5
policy compliance analysis
Which practice in the Ship (A5) phase of the security development cycle verifies
whether the product meets security mandates? - ANSWERS-A5 policy compliance
analysis
Which post-release support activity defines the process to communicate, identify,
and alleviate security threats? - ANSWERS-PRSA1: External vulnerability disclosure
response
What are two core practice areas of the OWASP Security Assurance Maturity
Model (OpenSAMM)? - ANSWERS-Governance, Construction
Which practice in the Ship (A5) phase of the security development cycle uses tools
to identify weaknesses in the product? - ANSWERS-Vulnerability scan
Which post-release support activity should be completed when companies are
joining together? - ANSWERS-Security architectural reviews
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Teacher101. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $17.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
83100 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now