Discuss WGU Secure Software Design (D487) Exam Topic 6 Question 1

The product security incident response team (PSIRT) has decided to make a formal public disclosure, including base and temporal common vulnerability scoring system (CVSS) scores and a common vulnerabilities and exposures (CVE) ID report, of an externally discovered vulnerability.

What is the most likely reason for making a public disclosure?

AThe potential for increased public awareness of a vulnerability is probable, which could lead to higher risk for customers.

BThe vulnerability reporter has threatened to make the finding public after being notified that their case was not credible.

CThe response team has determined that the vulnerability is credible.

DNotification of a vulnerability from an external party has occurred.

Suggested Answer: C

Get Premium Secure Software Design (D487) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Sonia 6 months ago

D is also possible. Just notifying about the vulnerability is important.

Kimi 6 months ago

I lean towards B. If the reporter threatened to go public, they had to act.

Hailey 6 months ago

True, A is valid too. Awareness can lead to better security practices.

Casey 7 months ago

But what about A? Increased awareness can help customers stay safe.

Tamekia 7 months ago

I agree, C makes sense. Credibility is key for public disclosure.

Leonida 7 months ago

I think it's C. They must believe the vulnerability is credible.

Clare 8 months ago

I disagree, it feels like they’re just covering their backs with this disclosure.

Cherelle 8 months ago

Option D makes sense; they need to inform users about external reports.

Pedro 8 months ago

I'm feeling lucky, let's go with B. What could go wrong?

Lettie 8 months ago

This is a no-brainer. The answer is clearly C. Who even considers B?

Twana 8 months ago

D) Notification of a vulnerability from an external party has occurred.

Stevie 8 months ago

C) The response team has determined that the vulnerability is credible.

Lauran 9 months ago

I vaguely remember that if a reporter threatens to go public, it could push the team to disclose. That seems like a strong motivator.

Adelle 9 months ago

I feel like the external notification aspect is important, but I can't recall if that alone would trigger a public disclosure.

Tess 9 months ago

I think it might be related to the credibility of the vulnerability. We practiced a question where the response team had to assess if a report was valid.

Stephania 9 months ago

I remember discussing how public disclosures can raise awareness, but I'm not sure if that's the main reason here.

Marylin 9 months ago

Hmm, I'm a bit torn between C and D. On one hand, the team has determined the vulnerability is credible, which points to C. But the question also mentions an "externally discovered" vulnerability, so D about the notification could also be a factor. I'll have to think this through a bit more.

Rebbeca 9 months ago

I feel pretty confident about this one. The public disclosure is likely happening because the vulnerability has been confirmed as credible by the response team, rather than just because of an external notification or threat. C seems like the most logical choice.

Leigha 10 months ago

Surprised they’re disclosing it! Isn’t that risky for their reputation?

Cristy 10 months ago

Okay, let me think this through. The key information seems to be that the PSIRT is making a formal public disclosure, which implies they've verified the issue. So I'm leaning towards C as the best answer.

Geraldo 10 months ago

Public disclosure definitely raises awareness about vulnerabilities.

Antonio 10 months ago

I think it's mostly about credibility. They must believe it's a real threat.

Tracey 11 months ago

I'm a little confused here. Is the public disclosure happening because the vulnerability reporter threatened to go public, or because the team actually verified the issue? I'm not sure which one is the "most likely" reason.

Gayla 11 months ago

Hmm, this seems like a pretty straightforward question. I think the answer is C - the response team has determined the vulnerability is credible.

Chu 5 months ago

↳ replying to Gayla

True, but if it's credible, they need to inform everyone.

Carline 6 months ago

↳ replying to Gayla

But what about A? Increased awareness can be risky too.

Kris 6 months ago

↳ replying to Gayla

Definitely! If they found it credible, they have to disclose.

Jamal 6 months ago

↳ replying to Gayla

I agree, C makes the most sense. Credibility is key.

Jaime 10 months ago

↳ replying to Gayla

I think C is the best choice. Transparency is important!

WGU Secure Software Design (D487) Exam - Topic 6 Question 1 Discussion