Confidently Practice Online with Free Secure-Software-Design Exam Cram

Practice your WGU Secure Software Design (D487, KEO1) certification test with free Secure-Software-Design exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real Secure-Software-Design exam dumps, verified questions, and expert-designed free online practice tests. Moreover our WGU Secure-Software-Design exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which software-testing technique can be automated or semi-automated and provides invalid, unexpected, or random data to the inputs of a computer software program?

Options :

A : Fuzzing

B : Static analysis

C : Dynamic analysis

D : Bugtraq

Answer: A

Question 2

Which secure coding best practice says to only use tested and approved components and use task-specific, built-in APIs to conduct operating system functions?

Options :

A : Session Management

B : Authentication and Password Management

C : Data Protection

D : General Coding Practices

Answer: D

Question 3

Which threat modeling step collects exploitable weaknesses within the product?

Options :

A : Analyze the target

B : Rate threats

C : Identify and document threats

D : Set the scope

Answer: C

Question 4

Automated security testing was performed by attempting to log in to the new product with a known username using a collection of passwords. Access was granted after a few hundred attempts. How should existing security controls be adjusted to prevent this in the future?

Options :

A : Ensure passwords are encrypted when stored in persistent data stores

B : Ensure authentication controls are resistant to brute force attacks

C : Ensure strong password policies are enforced

D : Ensure credentials and authentication tokens are encrypted during transit

Answer: B

Question 5

While performing functional testing of the ordering feature in the new product, a tester noticed that the order

object was transmitted to the POST endpoint of the API as a human-readable JSON object.

How should existing security controls be adjusted to prevent this in the future?

Options :

A : Ensure passwords and private information are not logged

B : Ensure sensitive transactions can be traced through an audit log

C : Ensure the contents of authentication cookies are encrypted

D : Ensure all requests and responses are encrypted

Answer: D