GH-500 Practice Test

GH-500 Practice Test practice questions, page 2 of 5, with answer review and explanations.

Question 6

Which of the following benefits do code scanning, secret scanning, and dependency review provide?

  1. Automatically raise pull requests, which reduces your exposure to older versions of dependencies.
  2. View alerts about dependencies that are known to contain security vulnerabilities.
  3. Search for potential security vulnerabilities, detect secrets, and show the full impact of changes to dependencies.
  4. Confidentially report security vulnerabilities and privately discuss and fix security vulnerabilities in your repository’s code.

Question 7

Which alerts do you see in the repository’s Security tab? Each answer presents part of the solution. (Choose three.)

  1. secret scanning alerts
  2. Dependabot alerts
  3. code scanning alerts
  4. security status alerts
  5. repository permissions

Question 8

A dependency has a known vulnerability. What does the warning message include?

  1. an easily understandable visualization of dependency change
  2. a brief description of the vulnerability
  3. how many projects use these components
  4. the security impact of these changes

Question 9

Which features require GitHub Advanced Security to be enabled for internal and private repositories in an organization? Each correct answer presents part of the solution. (Choose two.)

  1. security policy
  2. secret scanning
  3. packages
  4. dependency review

Question 10

Which of the following is the best way to dispose of a compromised secret?

  1. Create a new secret.
  2. Revoke the secret.
  3. Update any services that use the secret.
  4. Remove the secret from the code base.