Page 1 of 198
1
WGU-C706 SECURE SOFTWARE DESIGN OBJECTIVE
ASSESSMENT AND PA COMPLETE 450 QUESTIONS AND
CORRECT DETAILED ANSWERS LATEST UPDATE THIS YEAR -
JUST RELEASED
WGU-C706 Secure Software Design (Pre-Assessment)
QUESTION: Which phase contains sophisticated software development processes that ensure that feedback from one phase reaches to the previous phase to improve future results?
A Initial B Managed C Optimizing D Repeatable - ANSWER-C
QUESTION: The activities for compliance include ensuring collected information is only used for intended purposes, information is timely and accurate, and the public is aware of the information collected and how it is used.
Which well-accepted secure development standard is addressed by these activities?
- / 4
Page 2 of 198
2 A PIA
B PA-DSS
C PCI-DSS
D PTS-DSS - ANSWER-A
QUESTION: An organization is in the process of building an application for its banking software.
Which security coding practice must the organization follow?
A Run a data analysis B Conduct data validation C Validate the data source D Align business goals - ANSWER-B
QUESTION: What is included in a typical job description of a software security champion (SSC)?
A Identify software update source and sink B Review code to identify skill-related bugs 2 / 4
Page 3 of 198
3 C Develop and manage the after-SDLC stage D Consider all possible paths of attack or exploits - ANSWER-D
QUESTION: Which role is a training champion of software security, an advocate for the overall SDL process, and a proponent for promulgating and enforcing the overall software product security program?
A Software security user (SSU) B Software security architect (SSA) C Software security evangelist (SSE) D Software security stakeholder (SSS) - ANSWER-C
QUESTION: Which role requires the technical capability to be trained as a software security architect who then assists the centralized software security group with architecture security analysis and threat modeling?
A Software champion B Software evangelist C Junior software developer 3 / 4
Page 4 of 198
4 D Senior software programmer - ANSWER-A Which due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle?
A Developing a request for proposal (RFP) that includes supply chain security risk management B Lessening the risk of disseminating information during disposal C Facilitating knowledge transfer between suppliers D Mitigating supply chain security risk by providing user guidance - ANSWER-A
QUESTION: Which due diligence activity for supply chain security investigates the means by which data sets are shared and assessed?
A on-site assessment B process policy review C third-party assessment D document exchange and review - ANSWER-D
QUESTION: Consider these characteristics:
- / 4