Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by WGU University
Exam Format
90 min
60
Not publicly disclosed (competency-based)
Graduate/Master's
Registration
Included in tuition
Online Proctored or online proctoring
Validity
Part of degree program - no separate certification expiration
Not applicable - academic course credit
KEO1 Exam Topics and Domains
KEO1 is organized into 4 weighted domains. Expect to work with OWASP SAMM, Burp Suite, Microsoft SDL, OWASP ZAP, and more.
1
Security Methods within SDLC
25%
Software Security Fundamentals
Software Security Principles and ConceptsSDLC vs SDL DifferencesThreat and Vulnerability Taxonomies
- Identify basic software security concepts and principles used throughout the SDLC
- Determine the importance and types of functional and non-functional software security requirements
- Explain threat and vulnerability taxonomies used throughout the software development community
Security Testing Methodologies
Static AnalysisDynamic AnalysisFuzzing Techniques
- Apply different testing methodologies
- Understand differences among Fuzzing, Static Analysis, and Dynamic Analysis
- Select appropriate testing approach for security validation
2
Software Requirements and Risk Assessment
25%
Development Methodologies
Agile Development SecurityWaterfall Development SecurityDevSecOps Integration
- Use different development paradigms like Waterfall and Agile
- Apply knowledge of software development roles within an agile development framework
- Understand how security requirements differ in each methodology
Security Assessment and Planning
Privacy Impact Assessment (PIA)Functional vs Non-Functional Security RequirementsSoftware Security Roles and Responsibilities
- Determine the importance and types of functional and non-functional software security requirements
- Identify appropriate security assessment planning activities
- Understand privacy and compliance requirements
3
Software Security Test Planning and Threat Modeling
25%
Threat Modeling Techniques
STRIDE Threat ModelDREAD Risk AssessmentPASTA MethodologyCommon Vulnerability Scoring System (CVSS)
- Explain why threat modeling is essential to developing secure software
- Understand how STRIDE is useful in analyzing probable threats
- Explain how PASTA model analyzes software security
- Use CVSS for vulnerability evaluation
Security Test Planning
Security Test CasesTesting Approaches: White/Gray/Black BoxSecurity Testing ToolsCode Review Practices
- Explain why security testing is critical for software development
- Develop security test cases aligned with risks
- Use security testing tools effectively
- Conduct effective code reviews
4
Software Testing, Deployment, and Post-Release
25%
Product Readiness and Deployment
Web Application Vulnerability AssessmentProduct Release Decision-MakingSecurity Configuration Management
- Evaluate factors for web application vulnerabilities
- Recognize importance of pre and post-release SDLC stages
- Make informed release decisions balancing security and functionality
Post-Release Security
Post-Release SupportSecurity Monitoring and ResponseContinuous Improvement
- Understand post-release security support requirements
- Identify post-release success factors
- Implement effective incident response
Security Frameworks and Maturity Models
OpenSAMM (OWASP Software Assurance Maturity Model)BSIMM (Building Security In Maturity Model)SDL Integration with Development Models
- Understand maturity model differences (BSIMM vs OpenSAMM)
- Know SDL phases and activities
- Integrate SDL with Waterfall, Agile, and DevSecOps
How do I earn this certification?
Passing KEO1 earns the Master of Science, Cybersecurity and Information Assurance certification. It sits in the Cybersecurity and Information Assurance track.
Current Level Exams
- D483 - Security Operations
- D485 - Cloud Security
- D484 - Penetration Testing
- D488 - Cybersecurity Architecture and Engineering
- D486 - Governance, Risk, and Compliance
- D489 - Cybersecurity Management
- D490 - Cybersecurity Graduate Capstone
Alternative Paths
- Course included as elective option D487 provides security knowledge for software engineers
- CompTIA Security+Prerequisite for some cybersecurity roles; foundational compared to MSCSIA
- CEH (Certified Ethical Hacker) Complementary penetration testing skills, overlaps with D484 content
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for KEO1 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2023 (Textbook edition update)
Updates
- Threat Modeling Tools Microsoft Threat Modeling Tool 7.3 Current tool version for STRIDE practice • Release date: 2024-05-01
- Static Analysis Tools SonarQube LTS 10.4 Mentioned in course videos, current version for practice • Release date: 2024-10-15
- Security Frameworks OWASP SAMM 2.1 OpenSAMM framework covered in Chapter 9 • Release date: 2023-08-01
- Vulnerability Scoring CVSS 3.1 Current CVSS version for vulnerability assessment • Release date: 2019-06-01
Who should take this exam?
This exam is typically taken by Graduate students in cybersecurity programs and Software developers seeking security skills.
- Basic understanding of software development
- Familiarity with programming concepts
- Knowledge of networking fundamentals