GH-500 Practice Questions & Answers • ExamPrepare

Question 1

By default, which roles can enable Dependabot alerts?

security analysts
repository administrators
repository maintainers
outside collaborators

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

By default, which three locations will secret scanning look in a repository in order to execute its job? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

What details should you include in your security policy?

the previous commit version to the current branch
the reported issue for the security vulnerability
how to report a vulnerability
the standards for how to engage with a community

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What is code scanning?

a feature to identify all your project's dependencies
a feature that analyzes the code in a GitHub repository to find security vulnerabilities and coding errors
a feature that scans repositories for known types of secrets, to prevent fraudulent use of secrets that were committed accidentally
a feature to privately discuss, fix, and publish information about security vulnerabilities in your repository

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which two of the following is required to block the merge of a pull request containing critical vulnerabilities? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

Establish the protection rules in the code security settings.
Add a repository ruleset.
Configure a CODEOWNERS file in the repository.
Enable Dependabot for the organization.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

You have a GitHub Enterprise Cloud Organization that uses GitHub Code Security.

You need to create a security campaign to remediate cross-site scripting (XSS) vulnerabilities identified by code scanning. The campaign must meet the following requirements:

Include only alerts that support automatic remediation.
Include only alerts associated with cross-site scripting (CWE-79).
Enable eligible security administrators to manage and track the campaign.

How should you configure the campaign? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.