WGU Secure-Software-Design 問題集

質問 1：
While performing functional testing of the ordering feature in the new product, a tester noticed that the order object was transmitted to the POST endpoint of the API as a human-readable JSON object.
How should existing security controls be adjusted to prevent this in the future?
A. Ensure all requests and responses are encrypted
B. Ensure sensitive transactions can be traced through an audit log
C. Ensure passwords and private information are not logged
D. Ensure the contents of authentication cookies are encrypted
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What are the eight phases of the software development lifecycle (SDLC)?
A. Planning, security analysis, requirement analysis, design, implementation, threat mitigation, testing, maintenance
B. Gather requirements, prototype, perform threat modeling, write code, test, user acceptance testing, deploy, maintain
C. Plan, gather requirements, identify attack surface, design, write code, perform code reviews, test, deploy
D. Planning, requirements, design, implementation, testing, deployment, maintenance, end of life
正解：D

質問 3：
Which privacy impact statement requirement type defines processes to keep personal information updated and accurate?
A. Data integrity requirements
B. Access requirements
C. Personal information retention requirements
D. Collection of personal information requirements
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Developers have finished coding, and changes have been peer-reviewed. Features have been deployed to a pre- production environment so that analysts may verify that the product is working as expected.
Which phase of the Software Development Life Cycle (SDLC) is being described?
A. Testing
B. Deployment
C. Requirements
D. Design
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
The organization has contracted with an outside firm to simulate an attack on the new software product and report findings and remediation recommendations.
Which activity of the Ship SDL phase is being performed?
A. Final security review
B. Policy compliance analysis
C. Penetration testing
D. Open-source licensing review
正解：C
解説: (Topexam メンバーにのみ表示されます)