Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

Secure-Software-Design WGUSecure Software Design (KEO1) Exam

  • WGU
  • 4 free sample questions

About this exam

Secure-Software-Design is the WGU exam WGUSecure Software Design (KEO1) Exam. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
Secure-Software-Design
Vendor
WGU
Practice questions
Not available yet
Free sample questions
4
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for Secure-Software-Design.

Question 1

What is a best practice of secure coding?

  1. Option A:
    Planning
  2. Option B:
    Session management
  3. Option C:
    User acceptance testing
  4. Option D:
    Microservices
Show answer and explanation

Correct answer: B

Session management is a core component of secure coding, which involves maintaining the state of
a user’s interaction with a system. Proper session management can help protect against various
security vulnerabilities, such as session hijacking and session fixation attacks. It is essential for
ensuring that user data is handled securely throughout an application’s workflow.
Reference: The OWASP Secure Coding Practices guide emphasizes the importance of implementing
secure coding standards, which include robust session management1. Additionally, Snyk’s secure
coding practices highlight the significance of access control, including authentication and
authorization, as fundamental to protecting a system2. These resources align with the concept that
effective session management is a best practice in secure coding.

Question 2

What sits between a browser and an internet connection and alters requests and responses in a way
the developer did not intend?

  1. Option A:
    Load testing
  2. Option B:
    Input validation
  3. Option C:
    Intercept proxy
  4. Option D:
    Reverse engineering
Show answer and explanation

Correct answer: C

An intercept proxy, also known as a proxy server, sits between a web client (such as a browser) and
an external server to filter, monitor, or manipulate the requests and responses passing through it.
This can be used for legitimate purposes, such as security testing and user privacy, but it can also be
exploited by attackers to alter web traffic in a way that the developer did not intend, potentially
leading to security vulnerabilities.
Reference:
Understanding of HTTP and HTTPS protocols12.
Definition and role of proxy servers3.
See all 4 free sample questions