WGUSecure Software Design (KEO1) Exam: SECURE-SOFTWARE-DESIGN

Using a web-based common vulnerability scoring system (CVSS) calculator, a security response team member performed an assessment on a reported vulnerability in the user authentication component of the company's new product. The basso score of the vulnerability was 8.3 and changed to 9.4 after adjusting temporal and environmental metrics.

Which rating would CVSS assign this vulnerability?

A. High severity

B. Critical severity

C. Medium severity

D. Low severity

Which secure coding practice involves clearing all local storage as soon as a user logs off for the night and will automatically log a user out after an hour of inactivity?

A. Access control

B. System configuration

C. Communication security

D. Session management

The software security group is conducting a maturity assessment using the Open Web Application Security Project Software Assurance Maturity Model (OWASP OpenSAMM). They are currently focused on reviewing design artifacts to ensure they comply with organizational security standards.

Which OpenSAMM business function is being assessed?

A. Construction

B. Deployment

C. Verification

D. Governance