Free WGU Secure-Software-Design Exam Dumps Questions & Answers

Which type of manual code review technique is being used when the reviewer starts at an input control and traces its value through the application to each of the value's outputs?

• A.  Risk analysis
• B.  Control flow analysis
• C.  Threat analysis
• D.  Data flow analysis

Which mitigation technique is used to fight against an identity spoofing threat?

• A.  Encryption
• B.  Require user authorization
• C.  Audit trails
• D.  Filtering

What is one of the tour core values of the agile manifesto?

• A.  Communication between team members
• B.  Individuals and interactions over processes and tools
• C.  Teams should have a dedicated and open workspace.
• D.  Business people and developers must work together daily throughout the project.

Which DREAD category is based on how easily a threat exploit can be found?

• A.  Reproducibility
• B.  Discoverability
• C.  Damage Potential
• D.  Affected Users

A legacy application has been replaced by a new product that provides mobile capabilities to the company's customer base. The two products have run concurrently for the last three months to provide a fallback if the new product experienced a large-scale failure. The time has come to turn off access to the legacy application.
Which phase of the Software Development Life Cycle (SDLC) is being described?

• A.  Maintenance
• B.  Design
• C.  End of Life
• D.  Planning