Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free GitHub Advanced Security Exam Practice Questions

Question # 21

Which syntax in a query suite tells CodeQL to look for one or more specified .ql files?

Options:

A.  

query

B.  

qlpack

C.  

qls

Discussion 0
Question # 22

When using CodeQL, how does extraction for compiled languages work?

Options:

A.  

By generating one language at a time

B.  

By resolving dependencies to give an accurate representation of the codebase

C.  

By monitoring the normal build process

D.  

By running directly on the source code

Discussion 0
Question # 23

Secret scanning will ignore a secret_scanning.yml file that:

Options:

A.  

Is 100 KB or larger.

B.  

Is 1 MB or larger.

C.  

Contains 1,000 or more entries.

D.  

Has 1,000 or more directories.

Discussion 0
Question # 24

Which of the following statements most accurately describes push protection for secret scanning custom patterns?​

Options:

A.  

Push protection must be enabled for all, or none, of a repository's custom patterns.

B.  

Push protection is an opt-in experience for each custom pattern.

C.  

Push protection is not available for custom patterns.

D.  

Push protection is enabled by default for new custom patterns.​

Discussion 0
Question # 25

Assuming that no custom Dependabot behavior is configured, who has the ability to merge a pull request created via Dependabot security updates?​

Options:

A.  

An enterprise administrator

B.  

A user who has write access to the repository

C.  

A user who has read access to the repository

D.  

A repository member of an enterprise organization​

Discussion 0
Question # 26

As a developer, you need to configure a code scanning workflow for a repository where GitHub Advanced Security is enabled. What minimum repository permission do you need?

Options:

A.  

Write

B.  

None

C.  

Admin

D.  

Read

Discussion 0
Question # 27

Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?

Options:

A.  

Usernames

B.  

Personally Identifiable Information (PII)

C.  

Private keys

D.  

Sealed boxes

Discussion 0
Question # 28

What is required to trigger code scanning on a specified branch?

Options:

A.  

The repository must be private.

B.  

Secret scanning must be enabled on the repository.

C.  

Developers must actively maintain the repository.

D.  

The workflow file must exist in that branch.

Discussion 0
Question # 29

As a contributor, you discovered a vulnerability in a repository. Where should you look for the instructions on how to report the vulnerability?

Options:

A.  

support.md

B.  

readme.md

C.  

contributing.md

D.  

security.md

Discussion 0
Question # 30

What is the minimum role needed in order to view the secret scanning alerts list within the Security tab of a repository?

Options:

A.  

Admin

B.  

Read

C.  

Repository owner

D.  

Write

Discussion 0

GH-500 PDF

GH-500 PDF (Printable)
$46.5
$154.99

GH-500 Testing Engine

GH-500 PDF (Printable)
$51
$169.99

GH-500 PDF + Testing Engine

GH-500 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions