Free GitHub GitHub-Advanced-Security Practice Test & Real Exam Questions
Assuming that notification settings and Dependabot alert recipients have not been customized, which user account setting should you use to get an alert when a vulnerability is detected in one of your repositories?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
When configuring code scanning with CodeQL, what are your options for specifying additional queries?
(Each answer presents part of the solution. Choose two.)
(Each answer presents part of the solution. Choose two.)
Correct Answer: A,B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
In the pull request, how can developers avoid adding new dependencies with known vulnerabilities?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following statements best describes secret scanning push protection?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which details do you have to provide to create a custom pattern for secret scanning? (Each answer presents part of the solution. Choose two.)
Correct Answer: C,D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Why should you dismiss a code scanning alert?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
How would you build your code within the CodeQL analysis workflow? (Each answer presents a complete solution. Choose two.)
Correct Answer: B,D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Secret scanning will scan:
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
