Free WGU Secure-Software-Design Exam Questions

Question 1

Which step in the change management process includes modifying the source code?

A : Patch management

B : Installation management

C : Privacy implementation assessment

D : Policy compliance analysis

Answer: A

Question 2

Which secure coding best practice says to assume all incoming data should be considered untrusted and should be validated to ensure the system only accepts valid data?

A : General coding practices

B : Input validation

C : Session management

D : System configuration

Answer: B

Question 3

While performing functional testing of the ordering feature in the new product, a tester noticed that the orderobject was transmitted to the POST endpoint of the API as a human-readable JSON object.How should existing security controls be adjusted to prevent this in the future?

A : Ensure passwords and private information are not logged

B : Ensure sensitive transactions can be traced through an audit log

C : Ensure the contents of authentication cookies are encrypted

D : Ensure all requests and responses are encrypted

Answer: D

Question 4

What is the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or distribution to provide confidentiality, integrity, and availability?

A : Availability

B : Integrity

C : Confidentiality

D : Information Security

Answer: D

Question 5

While performing functional testing of the ordering feature in the new product, a tester noticed that the orderobject was transmitted to the POST endpoint of the API as a human-readable JSON object.How should existing security controls be adjusted to prevent this in the future?

A : Ensure passwords and private information are not logged

B : Ensure sensitive transactions can be traced through an audit log

C : Ensure the contents of authentication cookies are encrypted

D : Ensure all requests and responses are encrypted

Answer: D