WGUSecure Software Design (KEO1) (Secure-Software-Design) Free Practice Test
Question 1
A legacy application has been replaced by a new product that provides mobile capabilities to the company's customer base. The two products have run concurrently for the last three months to provide a fallback if the new product experienced a large-scale failure. The time has come to turn off access to the legacy application.
Which phase of the Software Development Life Cycle (SDLC) is being described?
Which phase of the Software Development Life Cycle (SDLC) is being described?
Correct Answer: C
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 2
Which secure coding best practice ensures sensitive information is not disclosed in any responses to users, authorized or unauthorized?
Correct Answer: D
Question 3
A company is moving forward with a new product. Product scope has been determined, teams have formed, and backlogs have been created. Developers are actively writing code for the new product, with one team concentrating on delivering data via REST services, one Team working on the mobile apps, and a third team writing the web application.
Which phase of the software development lifecycle (SDLC) is being described?
Which phase of the software development lifecycle (SDLC) is being described?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 4
During fuzz testing of the new product, random values were entered into input elements Search requests were sent to the correct API endpoint but many of them failed on execution due to type mismatches.
How should existing security controls be adjusted to prevent this in the future?
How should existing security controls be adjusted to prevent this in the future?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 5
Which secure software design principle states that it is always safer to require agreement of more than one entity to make a decision?
Correct Answer: A
Question 6
Which mitigation technique can be used to fight against a denial of service threat?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 7
The software security team prepared a detailed schedule napping security development lifecycle phases to the type of analysis they will execute.
Which design and development deliverable aid the team prepare?
Which design and development deliverable aid the team prepare?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).