100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
WGU D487 SECURE SW DESIGN QUESTIONS AND ANSWERS 2024 $17.99   Add to cart

Exam (elaborations)

WGU D487 SECURE SW DESIGN QUESTIONS AND ANSWERS 2024

 15 views  0 purchase
  • Course
  • WGU D487 SECURE SW DESIGN
  • Institution
  • WGU D487 SECURE SW DESIGN

WGU D487 SECURE SW DESIGN QUESTIONS AND ANSWERS 2024

Preview 3 out of 20  pages

  • September 22, 2024
  • 20
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers
  • WGU D487 SECURE SW DESIGN
  • WGU D487 SECURE SW DESIGN
avatar-seller
Teacher101
WGU D487 SECURE SW DESIGN

A new application is released, and users perform initial testing on the
application.Which type of testing are the users performing? - ANSWERS-Beta
testing



What is a non-system-related component in software security testing attack
surface validation? - ANSWERS-Users



When an application's input validation is not handled properly, it could result in
which kind of vulnerabilities? - ANSWERS-SQL injection, cross-site scripting



What are the advantages of the conducting static code analysis? - ANSWERS-
access to the actual instructions the software will be guessing



What are the advantages of the conducting dynamic code analysis? - ANSWERS-
tests a specific operational deployment



What are the advantages of the conducting fuzz testing? - ANSWERS-testing in a
random approach



What are the advantages of the conducting manual source code review? -
ANSWERS-requires no supporting technology

,What is phase five of the SDL? - ANSWERS-A5 Ship



During what phase in the SDL do product and security teams work together to
verify that the product complies with security policies? - ANSWERS-A5 Ship



In what phase does the the security development life cycle takes place in the last
phase of the software development life cycle when the organization is preparing
to release the product? - ANSWERS-A5 Ship



What are the four phases of penetration testing? - ANSWERS-assess, identify,
evaluate and plan, and deploy.



What are scans that target security issues that are found outside the firewall? -
ANSWERS-external scans



What are scans that require software to log onto a system to scan it? - ANSWERS-
authenticated scans



What are scans to identify security issues that a malicious attacker could exploit
from inside the network? - ANSWERS-internal scans



What are scans to exploit a vulnerability when it is identified? - ANSWERS-
intrusive target search

, What are regulations regarding the software licensing of in-house products -
ANSWERS-open-source software license compliance



Which activity in the Ship (A5) phase of the security development cycle sets
requirements for quality gates that must be met before release? - ANSWERS-A5
policy compliance analysis




Which practice in the Ship (A5) phase of the security development cycle verifies
whether the product meets security mandates? - ANSWERS-A5 policy compliance
analysis



Which post-release support activity defines the process to communicate, identify,
and alleviate security threats? - ANSWERS-PRSA1: External vulnerability disclosure
response



What are two core practice areas of the OWASP Security Assurance Maturity
Model (OpenSAMM)? - ANSWERS-Governance, Construction



Which practice in the Ship (A5) phase of the security development cycle uses tools
to identify weaknesses in the product? - ANSWERS-Vulnerability scan



Which post-release support activity should be completed when companies are
joining together? - ANSWERS-Security architectural reviews

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller Teacher101. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $17.99. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

67866 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling
$17.99
  • (0)
  Add to cart