Wgu D487 Pre-Assessment: Secure Software Design (Keo1) (Pkeo) Study Guide Questions And Correct Answers

The organization is moving from a waterfall to an agile software development methodology, so the software security group must adapt the security development life cycle as well. They have decided to break out security requirements and deliverables to fit better in the iterative life cycle by defining every-sprint requirements, one-time requirements, bucket requirements, and final security review requirements. Which type of requirement states that the team must perform remote procedure call (RPC) fuzz testing? {Ans: Bucket requirement}Which threat modeling process identifies threats to each individual object in a data flow diagram? {Ans: STRIDE-per-element}Which International Organization for Standardization (ISO) standard is the benchmark for information security today? {Ans: ISO/IEC 27001.}The scrum team is attending their morning meeting, which is scheduled at the beginning of the work day. Each team member reports what they accomplished yesterday, what they plan to accomplish today, and if they have any impediments that may cause them to miss their delivery deadline. Which scrum ceremony is the team participating in? {Ans: Daily Scrum}The software security team has been tasked with identifying who will be involved when security vulnerabilities are reported from external entities. They are creating a RACI matrix that will identify stakeholders