Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free GitHub Advanced Security Exam Practice Questions

Question # 11

What do you need to do before you can define a custom pattern for a repository?​

Options:

A.  

Provide a regular expression for the format of your secret pattern.

B.  

Add a secret scanning custom pattern.

C.  

Enable secret scanning on the repository.

D.  

Provide match requirements for the secret format.​

Stack Overflow

Discussion 0
Question # 12

Which of the following formats are used to describe a code scanning alert from CodeQL?

Options:

A.  

Common Weakness Enumeration (CWE)

B.  

Vulnerability Exploitability eXchange (VEX)

C.  

Common Vulnerabilities and Exposures (CVE)

D.  

GitHub Security Advisory (GHSA)

Discussion 0
Question # 13

As a repository owner, you want to receive specific notifications, including security alerts, for an individual repository. Which repository notification setting should you use?

Options:

A.  

Ignore

B.  

Participating and @mentions

C.  

All Activity

D.  

Custom

Discussion 0
Question # 14

Assuming that default security and analysis settings have not been changed at the repository, organization, or enterprise level, which scenario would generate a dependency graph for the repository?

Options:

A.  

When a public repository has a new dependency added to its manifest file

B.  

When a private repository is forked to be used as a dependent

C.  

When a public repository is forked to be used as a dependent

D.  

When a private repository has a new dependency added to its manifest file

Discussion 0
Question # 15

Secret scanning will scan:​

Options:

A.  

A continuous integration system.

B.  

Any Git repository.

C.  

The GitHub repository.

D.  

External services.​

Discussion 0
Question # 16

Which Dependabot configuration fields are required? (Each answer presents part of the solution. Choose three.)

Options:

A.  

directory

B.  

package-ecosystem

C.  

milestone

D.  

schedule.interval

E.  

allow

Discussion 0
Question # 17

An organization owner can give view access to Dependabot alerts to which type of user?

Options:

A.  

Members of a team with Read access to a different repository within the same organization

B.  

Outside collaborators with Read access

C.  

Members of a team with Write access to the repository

D.  

Members of an enterprise unassigned to the repository

Discussion 0
Question # 18

What does a CodeQL database of your repository contain?​

Options:

A.  

A build for Go projects to set up the project

B.  

A build of the code and extracted data

C.  

Build commands for C/C++, C#, and Java

D.  

A representation of all of the source code​

GitHub

Agentic AI for AppSec Teams

Discussion 0
Question # 19

By default, what is the minimum role needed to bypass push protection in a repository?

Options:

A.  

Maintain

B.  

Write

C.  

Admin

D.  

Triage

Discussion 0
Question # 20

Which of the following conditions must be met to enable secret scanning for private repositories?

Options:

A.  

An Advanced Security license must be uploaded to your repository.

B.  

An Advanced Security license must be applied to your user account.

C.  

The repository must be owned by an organization.

D.  

The repository must be owned by a user account.

Discussion 0

GH-500 PDF

GH-500 PDF (Printable)
$46.5
$154.99

GH-500 Testing Engine

GH-500 PDF (Printable)
$51
$169.99

GH-500 PDF + Testing Engine

GH-500 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions