WGU Secure-Software-Design - WGUSecure Software Design (KEO1) Exam Certification Exam
Question #1 (Topic: demo questions)
What is a best practice of secure coding?
Correct Answer: B
Explanation:
Session management is a core component of secure coding, which involves maintaining the state of
Session management is a core component of secure coding, which involves maintaining the state of
a user’s interaction with a system. Proper session management can help protect against various
security vulnerabilities, such as session hijacking and session fixation attacks. It is essential for
ensuring that user data is handled securely throughout an application’s workflow.
Reference: The OWASP Secure Coding Practices guide emphasizes the importance of implementing
secure coding standards, which include robust session management1. Additionally, Snyk’s secure
coding practices highlight the significance of access control, including authentication and
authorization, as fundamental to protecting a system2. These resources align with the concept that
effective session management is a best practice in secure coding.
Question #2 (Topic: demo questions)
What sits between a browser and an internet connection and alters requests and responses in a way
the developer did not intend?
Correct Answer: C
Explanation:
An intercept proxy, also known as a proxy server, sits between a web client (such as a browser) and
An intercept proxy, also known as a proxy server, sits between a web client (such as a browser) and
an external server to filter, monitor, or manipulate the requests and responses passing through it.
This can be used for legitimate purposes, such as security testing and user privacy, but it can also be
exploited by attackers to alter web traffic in a way that the developer did not intend, potentially
leading to security vulnerabilities.
Reference:
Understanding of HTTP and HTTPS protocols12.
Definition and role of proxy servers3.
Question #3 (Topic: demo questions)
Which software-testing technique can be automated or semi-automated and provides invalid,
unexpected, or random data to the inputs of a computer software program?
Correct Answer: A
Explanation:
Fuzzing is an automated or semi-automated software testing technique that involves providing
Fuzzing is an automated or semi-automated software testing technique that involves providing
invalid, unexpected, or random data to the inputs of a computer program1. This process is designed
to uncover coding errors, security vulnerabilities, and other potential issues within the software by
observing how it behaves under unexpected or malformed inputs. Fuzzing is particularly effective
because it can expose corner cases that have not been properly dealt with and can be used to test
programs that take structured inputs, such as file formats or protocols2
Question #4 (Topic: demo questions)
What refers to the review of software source code by developers other than the original coders to try
to identify oversights, mistakes, assumptions, a lack of knowledge, or even experience?
Correct Answer: B
Explanation:
Manual peer review refers to the systematic examination of software source code by