GH-500 Practice Test

Review 127 GH-500 practice questions with answer explanations and community insights.

Question 1

A secret scanning alert should be closed as “used in tests” when a secret is:

  1. in a test file.
  2. solely used for tests.
  3. in the readme.md file.
  4. not a secret in the production environment.

Question 2

What happens when you enable secret scanning on a private repository?

  1. Repository administrators can view Dependabot alerts.
  2. Dependency review, secret scanning, and code scanning are enabled.
  3. Your team is subscribed to security alerts.
  4. GitHub performs a read-only analysis on the repository.

Question 3

Which of the following statements best describes secret scanning push protection?

  1. Buttons for sensitive actions in the GitHub UI are disabled.
  2. Commits that contain secrets are blocked before code is added to the repository.
  3. Users need to reply to a 2FA challenge before any push events.
  4. Secret scanning alerts must be closed before a branch can be merged into the repository.

Question 4

What is a security policy?

  1. a security alert issued to a community in response to a vulnerability
  2. a file in a GitHub repository that provides instructions to users about how to report a security vulnerability
  3. an alert about dependencies that are known to contain security vulnerabilities
  4. an automatic detection of security vulnerabilities and coding errors in new or modified code

Question 5

Which of the following information can be found in a repository’s Security tab?

  1. number of alerts per GHAS feature
  2. GHAS settings
  3. access management
  4. two-factor authentication (2FA) options