Secure Software Design Exam Preparation Material | WGU Secure Software Design (D487) Exam

Prepare for the Secure Software Design with reliable study materials, practice questions, and key exam insights.

Prepare for the Secure Software Design WGU Secure Software Design (D487) exam with CertQueen's independently developed study resources. Review important concepts, practice scenario-based questions, and use clear explanations to identify areas that require further study.

Question#1

Features have been developed and fully tested, the production environment has been created, and leadership has approved the release of the new product. Technicians have scheduled a time and date to make the product available to customers.
Which phase of the software development lifecycle (SDLC) is being described?

A. Maintenance
B. Deployment
C. End of life
D. Testing

Explanation:
The phase being described is the Deployment phase of the SDLC. This phase involves making the software available for use by customers after it has been developed, tested, and approved for release. It includes the installation of the software in the production environment, ensuring that all features are operational as intended, and obtaining formal approval from leadership to proceed with making the product available to end-users. The deployment phase is critical as it transitions the software from a development setting to a real-world operational environment.
Reference: SDLC Deployment Phase C A Step by Step Guide1
Understanding the SDLC: Software Development Lifecycle Explained2

Question#2

The product security incident response team (PSIRT) has decided to make a formal public disclosure, including base and temporal common vulnerability scoring system (CVSS) scores and a common vulnerabilities and exposures (CVE) ID report, of an externally discovered vulnerability.
What is the most likely reason for making a public disclosure?

A. The potential for increased public awareness of a vulnerability is probable, which could lead to higher risk for customers.
B. The vulnerability reporter has threatened to make the finding public after being notified that their case was not credible.
C. The response team has determined that the vulnerability is credible.
D. Notification of a vulnerability from an external party has occurred.

Question#3

Which architecture deliverable identifies the organization's tolerance to security issues and how the organization plans to react if a security issue occurs?

A. Threat Modeling Artifacts
B. Risk Mitigation Plan
C. Business Requirements
D. Policy Compliance Analysis

Question#4

1.What are the three primary goals of the secure software development process?

A. Performance, reliability, and maintainability
B. Cost, speed to market, and profitability
C. Redundancy, scalability, and portability
D. Confidentiality, integrity, and availability

Explanation:
The three primary goals of the secure software development process, often referred to as the CIA triad, are confidentiality, integrity, and availability. These principles form the cornerstone of security considerations in the software development life cycle (SDLC).
Confidentiality ensures that sensitive information is accessed only by authorized individuals and systems. This involves implementing access controls and encryption to protect data from unauthorized access.
Integrity refers to maintaining the accuracy and consistency of data across its lifecycle. This means that the data is not altered or tampered with by unauthorized entities. Techniques like checksums and digital signatures help ensure data integrity.
Availability ensures that information and resources are accessible to authorized users when needed. This involves creating resilient systems that can withstand attacks and recover quickly from any disruptions.
By integrating these security goals into each phase of the SDLC, from planning and design to development, testing, and maintenance, organizations can create more secure software systems that are resilient to cyber threats.
Reference: The information provided here is verified as per the Secure Software Design documents and best practices in the field, as outlined by sources such as Snyk1, GeeksforGeeks2, and SAFECode3.

Question#5

Which DKEAD category has a risk rating based on the threat exploit's potential level of harm?

A. Damage potential
B. Reproducibility
C. Affected users
D. Exploitability

Explanation:
The DKEAD category that has a risk rating based on the threat exploit’s potential level of harm is Damage potential. This category assesses the total damage or impact that a threat could cause if it is exploited by an attacker. The risk rating in this category is determined by evaluating the severity of the potential damage, which could range from information disclosure to complete system destruction or loss of system availability.
Reference: DREAD Threat Modeling1
OWASP Risk Rating Methodology2
DREAD Threat Modeling: An Introduction to Qualitative Risk Analysis3

Exam Code: Secure Software Design
Q & A: 118 Q&As         Updated:  Oct 17,2026

 

 Access Complete Secure Software Design Preparation Material

What This Secure Software Design Study Resource Helps You Do

Review Key Concepts

Review the technologies, products, processes, and practical skills covered by the current Secure Software Design exam objectives.

Practice Scenario-Based Questions

Work through independently developed questions designed to strengthen your understanding of technical scenarios and decision-making.

Identify Knowledge Gaps

Use your results and the provided explanations to find weaker areas and focus your study more effectively.

How to Use This Secure Software Design Preparation Material

Review the Exam Scope

Start by reviewing the topics covered by the Secure Software Design exam. Compare them with the official exam objectives to understand the required technologies, operational tasks, and practical skills, then identify the areas that deserve the most attention.

Practice Independently

Complete a focused set of practice questions for each topic. On your first attempt, avoid referring to notes, answers, or other study resources so that you can evaluate your current understanding more accurately.

Study the Explanations

Review the answers and explanations after completing each practice session. Understand why the correct option is appropriate for the given scenario and why the other options may be incorrect or less suitable.

Close Knowledge Gaps

Keep track of incorrect answers, unfamiliar concepts, and weaker knowledge areas. Review these topics using official documentation and practical experience, then answer the related questions again to reinforce your understanding and monitor your progress.

Independent Secure Software Design Preparation Resource

CertQueen independently develops its certification study materials for educational purposes. The practice questions are not copied from, recalled from, or presented as live or official exam questions.

CertQueen is not affiliated with, endorsed by, sponsored by, or authorized by any certification provider. Certification names, exam codes, product names, and related trademarks are the property of their respective owners and are referenced only for identification and educational purposes.

Exam Code: Secure Software Design
Q & A: 118 Q&As
Updated:  Oct 17,2026

 

 Access Complete Secure Software Design Preparation Material