GH-500 Practice Test

GH-500 Practice Test practice questions, page 3 of 5, with answer review and explanations.

Question 11

Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?

  1. usernames
  2. sealed boxes
  3. Personal Identifiable Information (PII)
  4. private keys

Question 12

What is the best method to ensure all new code is scanned for vulnerabilities?

  1. Add the extended suite.
  2. Configure code scanning.
  3. Set up a security policy.
  4. Configure code owners.

Question 13

What is the first step you should take to fix an alert in secret scanning?

  1. Remove the secret in a commit to the main branch.
  2. Archive the repository.
  3. Update your dependencies.
  4. Revoke the alert if the secret is still valid.

Question 14

Where in the repository can you give additional users access to secret scanning alerts?

  1. Secrets
  2. Insights
  3. Settings
  4. Security

Question 15

What filter or sort settings can be used to prioritize the secret scanning alerts that present the most risk?

  1. Sort to display the oldest first.
  2. Filter to display active secrets.
  3. Select only the custom patterns.
  4. Sort to display the newest first.