PDF File

Latest WGU Secure-Software-Design D487 Practice Questions By Walton

Question 1

Credit card numbers are encrypted when stored in the database but are automatically decrypted when data is fetched. The testing tool intercepted the GET response, and testers were able to view credit card numbers as clear text.

How should the organization remediate this vulnerability?

  • A. Never cache sensitive data
  • B. Ensure there is an audit trail for all sensitive transactions
  • C. Ensure all data in transit is encrypted
  • D. Enforce role-based authorization controls in all application layers
Question 2

A company is moving forward with a new product. Product scope has been determined, teams have formed, and backlogs have been created. Developers are actively writing code for the new product, with one team concentrating on delivering data via REST services, one Team working on the mobile apps, and a third team writing the web application.

Which phase of the software development lifecycle (SDLC) is being described?

  • A. Deployment
  • B. Design
  • C. Implementation
  • D. Requirements