Free WGU Secure-Software-Design Exam Questions
Try our Free Demo Practice Tests for Comprehensive Secure-Software-Design Exam Preparation
-
WGU Secure-Software-Design Exam Questions
-
Provided By: WGU
- Exam: WGU Secure Software Design (D487)
- Certification: WGU Certificate Programs
-
Total Questions: 105
-
Updated On: Apr 05, 2025
-
Rated: 4.9 |
-
Online Users: 210
-
Question 1
-
The security team has received notice of an insecure direct object reference vulnerability in a third-party
component library that could result in remote code execution. The component library was replaced and is no
longer being used within the application.
How should the organization remediate this vulnerability?
Answer: D
-
The security team has received notice of an insecure direct object reference vulnerability in a third-party
component library that could result in remote code execution. The component library was replaced and is no
longer being used within the application.
How should the organization remediate this vulnerability?
-
Question 2
-
Which secure coding best practice says to assume all incoming data should be considered untrusted and
should be validated to ensure the system only accepts valid data?
Answer: B
-
Which secure coding best practice says to assume all incoming data should be considered untrusted and
should be validated to ensure the system only accepts valid data?
-
Question 3
-
The security team is reviewing all noncommercial software libraries used in the new product to ensure they
are being used according to the legal specifications defined by the authors.
What activity of the Ship SDL phase is being performed?
Answer: B
-
The security team is reviewing all noncommercial software libraries used in the new product to ensure they
are being used according to the legal specifications defined by the authors.
What activity of the Ship SDL phase is being performed?
-
Question 4
-
Which privacy impact statement requirement type defines how personal information will be protected when
authorized or independent external entities are involved?
Answer: C
-
Which privacy impact statement requirement type defines how personal information will be protected when
authorized or independent external entities are involved?
-
Question 5
-
Which privacy impact statement requirement type defines how personal information will be protected when
authorized or independent external entities are involved?
Answer: C
-
Which privacy impact statement requirement type defines how personal information will be protected when
authorized or independent external entities are involved?