WGU University WGU-KEO1 Online Practice Questions and Exam Preparation

WGU University WGU-KEO1 Online Questions & Answers

• Question 121:

  Which question reflects the security change management component of the change management process?

  A. How critical is the software to meeting the customers' mission?
  B. What threats are possible in the environment where the software will be operating?
  C. Which security objectives are required by the software?
  D. How is remote administration secured?
  D. How is remote administration secured?

  ---

  Option D best addresses security change management, here's why:

  Focus on Change:.The question directly asks about a modification to how remote administration is secured. This aligns with the core goal of security change management, which is to evaluate and control the security implications of changes to systems.

  Security-Specific:.The question is explicitly concerned with security, not general functionality or requirements.

  Practical Aspect:.Remote administration access is a frequent target for attackers, making it a common area for security change management scrutiny.

• Question 122:

  Which secure coding best practice says to require authentication before allowing any files to be uploaded and to limit the types of files to only those needed for the business purpose?

  A. File management
  B. Communication security
  C. Data protection
  D. Memory management
  A. File management

  ---

  The secure coding best practice that requires authentication before allowing any files to be uploaded, and limits the types of files to only those needed for the business purpose, falls under the category of.File Management. This practice is crucial for preventing unauthorized file uploads, which can be a common vector for attacks such as uploading malicious files or scripts. By enforcing authentication, the application ensures that only legitimate users can upload files. Additionally, restricting the file types to those necessary for business operations minimizes the risk of uploading potentially harmful files that could compromise the system. OWASP Secure Coding Practices File Upload Security Best Practices | CodeHandbook File Upload Protection ?10 Best Practices for Preventing ... - OPSWAT

• Question 123:

  Which software control test examines an application from a user perspective by providing a wide variety of input scenarios and inspecting the output?

  A. Dynamic
  B. Black box
  C. Static
  D. White box
  B. Black box

  ---

  The software control test that examines an application from a user perspective by providing a wide variety of input scenarios and inspecting the output is known as.black box testing. This testing method focuses on the functionality of the application rather than its internal structures or workings. Testers provide inputs and examine outputs without knowing how and where the inputs are worked upon. It's designed to test the system' s external behavior. Black box testing.is used to verify that the system meets

  the requirements and behaves as expected in various scenarios, including edge cases and incorrect input data. It helps in identifying discrepancies between the system's actual functionality and its specified requirements.

  This type of testing is applicable across various levels of software testing, including unit, integration, system, and acceptance testing. It is particularly useful for validating user stories and use cases during the software development process.

  Since black box testing treats the software as a "black box", it does not require the tester to have knowledge of the programming languages or the system's implementation. This allows testers to objectively test the software's behavior and performance.

  The concept of black box testing is well-documented and is a standard practice in secure software design, as outlined by sources such as LambdaTest1.and other industry best practices.

• Question 124:

  What is a countermeasure to the web application security frame (ASF) data validation/parameter validation threat category?

  A. Inputs enforce type, format, length, and range checks.
  B. All administrative activities are logged and audited.
  C. Sensitive information is not logged.
  D. All exceptions are handled in a structured way.
  A. Inputs enforce type, format, length, and range checks.

• Question 125:

  While performing functional testing of the ordering feature in the new product, a tester noticed that the order object was transmitted to the POST endpoint of the API as a human-readable JSON object. How should existing security controls be adjusted to prevent this in the future?

  A. Ensure passwords and private information are not logged
  B. Ensure sensitive transactions can be traced through an audit log
  C. Ensure the contents of authentication cookies are encrypted
  D. Ensure all requests and responses are encrypted
  D. Ensure all requests and responses are encrypted

  ---

  Transmitting data in a human-readable format, such as JSON, over an API can expose sensitive information if the communication channel is not secure. To protect the confidentiality and integrity of the data, it's essential to encrypt all requests and responses between clients and servers. Implementing encryption, typically through protocols like HTTPS (which utilizes TLS/SSL), ensures that data transmitted over the network is not readable by unauthorized parties. This prevents potential attackers from

  intercepting and understanding the data, thereby safeguarding sensitive information contained within the API communications. This practice is a fundamental aspect of secure software development and aligns with the Implementation business function of the OWASP SAMM. Within this function, the Secure Build practice emphasizes the importance of configuring the software to operate securely in its intended environment, which includes enforcing encryption for data in transit.

  References:

  OWASP SAMM: Implementation - Secure Build

• Question 126:

  Recent vulnerability scans discovered that the organization's production web servers were responding to ping requests with server type, version, and operating system, which hackers could leverage to plan attacks. How should the organization remediate this vulnerability?

  A. Ensure servers are configured to return as little information as possible to network requests
  B. Ensure servers are regularly updated with the latest security patches
  C. Always uninstall or disable features that are not required
  D. Access to configuration files is limited to administrators
  A. Ensure servers are configured to return as little information as possible to network requests

  ---

  To remediate the vulnerability of servers responding to ping requests with sensitive information, the organization should configure the servers to return as little information as possible to network requests. This practice is known as reducing the attack surface. By limiting the amount of information disclosed, potential attackers have less data to use when attempting to exploit vulnerabilities. Regular updates and patching (Option B) are also important, but they do not address the specific issue of information disclosure. Uninstalling or disabling unnecessary features (Option C) and restricting access to configuration files (Option D) are good security practices, but they do not directly prevent the leakage of server information through ping responses. The remediation steps are aligned with best practices in vulnerability management, which include finding, prioritizing, and fixing vulnerabilities, as well as configuring servers to minimize the exposure of sensitive information.

• Question 127:

  Which mitigation technique can be used to light against a threat where a user may gain access to administrator level functionality?

  A. Encryption
  B. Quality of service
  C. Hashes
  D. Run with least privilege
  D. Run with least privilege

  ---

  The principle of running with the least privilege is a fundamental security concept that involves granting users only the permissions they need to perform their tasks and no more. This minimizes the risk of a user gaining access to administrator-level functionality that they are not authorized to use. By limiting the privileges of user accounts to the bare minimum necessary, the potential damage from various attacks, such as privilege escalation, is significantly reduced.

  References: The concept of least privilege is widely recognized as a critical security measure.Resources like Exabeam's article on preventing privilege escalation and TechTarget's guide on privilege escalation attacks provide insights into how enforcing least privilege can mitigate such threats12. These sources verify that running with the least privilege is an effective mitigation technique against the threat of unauthorized access to elevated privileges.

• Question 128:

  Which secure software design principle states that it is always safer to require agreement of more than one entity to make a decision?

  A. Least Privilege
  B. Total Mediation
  C. Separation of Privileges
  D. Psychological Acceptability
  C. Separation of Privileges

• Question 129:

  The security team has received notice of an insecure direct object reference vulnerability in a third-party component library that could result in remote code execution. The component library was replaced and is no longer being used within the application. How should the organization remediate this vulnerability?

  A. Ensure Sensitive Information Is Not Logged
  B. Ensure Auditing and Logging Is Enabled on All Servers
  C. Access to Configuration Files Is Limited to Administrators
  D. Enforce the Removal of Unused Dependencies
  D. Enforce the Removal of Unused Dependencies

• Question 130:

  Which secure coding practice involves clearing all local storage as soon as a user logs of for the night and will automatically log a user out after an hour of inactivity?

  A. Access control
  B. System configuration
  C. Communication security
  D. Session management
  D. Session management

  ---

  The practice of clearing all local storage when a user logs off and automatically logging a user out after an hour of inactivity falls under the category of.Session Management. This is a security measure designed to prevent unauthorized access to a user's session and to protect sensitive data that might be stored in the local storage. By clearing the local storage, any tokens, session identifiers, or other sensitive information are removed, reducing the risk of session hijacking or other attacks. The automatic logout feature ensures that inactive sessions do not remain open indefinitely, which could otherwise be exploited by attackers. The information aligns with the secure coding practices outlined by the OWASP Foundation1, and is supported by common practices in web development for managing sessions and local storage.