WGU (D487, KEO1) Secure Software Design Exam - Topic 6 Question 2 Discussion

Actual exam question for WGU's WGU (D487, KEO1) Secure Software Design exam

Question #: 2
Topic #: 6

[All WGU (D487, KEO1) Secure Software Design Questions]

Which secure software design principle assumes attackers have the source code and specifications of the product?

AOpen Design

BPsychological Acceptability

CTotal Mediation

DSeparation of Privileges

Show Suggested Answer

Suggested Answer: A

by Jacquelyne at Nov 19, 2025, 03:32 PM

Limited Time Offer

25%

Off

Get Premium WGU (D487, KEO1) Secure Software Design Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Letha

3 months ago

Open Design helps in identifying vulnerabilities early on.

upvoted 0 times

...

Howard

3 months ago

D) Separation of Privileges is good, but A is the best fit.

upvoted 0 times

...

Dorinda

3 months ago

C) Total Mediation seems less relevant here.

upvoted 0 times

...

Rene

3 months ago

I feel B) Psychological Acceptability is important too, but not for this question.

upvoted 0 times

...

Theron

3 months ago

Agreed! Open Design is crucial for security.

upvoted 0 times

...

Fatima

4 months ago

Yup, Open Design assumes attackers know the ins and outs!

upvoted 0 times

...

Cherri

4 months ago

I thought it was more about user experience, not just code access.

upvoted 0 times

...

Casandra

4 months ago

Wait, are we sure about that? Sounds too simple.

upvoted 0 times

...

Miles

5 months ago

Totally agree, Open Design is key!

upvoted 0 times

...

Delpha

5 months ago

It's definitely A) Open Design.

upvoted 0 times

...

Jamey

5 months ago

Open Design, huh? I guess that makes sense if the bad guys know all your secrets already.

upvoted 0 times

...

Georgene

5 months ago

B) Psychological Acceptability? Really? That's not even close to the right principle here.

upvoted 0 times

...

Davida

5 months ago

I'm going with C) Total Mediation. Sounds like it could be the right answer.

upvoted 0 times

...

Shenika

5 months ago

D) Separation of Privileges is a good security principle, but it doesn't assume the attacker has the source code.

upvoted 0 times

...

Shaun

6 months ago

A) Open Design is the correct answer. Attackers having the source code is a key assumption of this principle.

upvoted 0 times

...

Cheryl

6 months ago

I feel like I’ve seen a question like this before, but I can't recall if it was about Open Design or something else.

upvoted 0 times

...

Cassi

6 months ago

I remember studying about secure design principles, and Open Design definitely sounds familiar. It’s about transparency, right?

upvoted 0 times

...

Chaya

6 months ago

I think the principle that assumes attackers have access to the source code is Open Design, but I'm not entirely sure.

upvoted 0 times

...

Leeann

6 months ago

Okay, I'm going to go with C) Total Mediation. That principle ensures all access to resources is checked, even if the attacker has the source code.

upvoted 0 times

...

Beula

6 months ago

You know, I think I remember learning about this in class. Let me think it through carefully before answering.

upvoted 0 times

...

Jamal

7 months ago

I think it's A) Open Design. Makes sense to assume attackers know the code.

upvoted 0 times

...

Carmen

7 months ago

Wait, I'm not sure about that. Isn't Separation of Privileges also based on the assumption that the attacker has access to the system?

upvoted 0 times

...

Ena

7 months ago

I thought Total Mediation was related to access control, but now I'm questioning if it could be the answer here.

upvoted 0 times

...

Rolland

7 months ago

Hmm, I'm stumped. Guess I'll have to go with my gut and choose A) Open Design.

upvoted 0 times

...

Paz

8 months ago

I'm pretty sure it's A) Open Design. That principle assumes the attacker has full knowledge of the system.

upvoted 0 times

...

Evangelina

8 months ago

Hmm, this one seems tricky. I think the key is to focus on the "assume attackers have the source code" part of the question.

upvoted 0 times

Thomasena

2 months ago

True, but for this question, A seems the most relevant.

upvoted 0 times

...

Johnetta

2 months ago

But what about D) Separation of Privileges? Isn’t that important too?

upvoted 0 times

...

Detra

2 months ago

I’m leaning towards A too. It’s all about transparency.

upvoted 0 times

...

Marlon

3 months ago

Yeah, that makes sense! Attackers knowing the code changes everything.

upvoted 0 times

...

Jess

7 months ago

I think it’s definitely A) Open Design.

upvoted 0 times

...