Free Microsoft GH-500 Practice Test & Real Exam Questions

Exam Code/Number: GH-500
Exam Name/Title: GitHub Advanced Security
Certification Provider: Microsoft
Corresponding Certification: GitHub Administrator

Exam Questions: 127
Updated On: Oct 05, 2026

Question #1

Where in the repository can you give additional users access to secret scanning alerts?

A. Insights

B. Settings

C. Secrets

D. Security

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #2

You are tasked with filtering queries in a CodeQL query suite. Which metadata tag matches on the last path component?

A. query path

B. tags contain all

C. tags contain

D. query filename

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #3

Which of the following statements best describes secret scanning push protection?

A. Users need to reply to a 2FA challenge before any push events.

B. Buttons for sensitive actions in the GitHub UI are disabled.

C. Secret scanning alerts must be closed before a branch can be merged into the repository.

D. Commits that contain secrets are blocked before code is added to the repository.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #4

Your security team requested that you enable the dependency graph. What happens when you enable this feature for your repository?

A. New repositories will need to have dependency information enabled.

B. Admins of the repository will see dependency information in the dependency graph.

C. GitHub generates Dependabot alerts for vulnerable dependencies.

D. Dependabot security updates create pull requests to upgrade those dependencies.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #5

You are configuring code scanning with CodeQL. What is one impact of using a language matrix in your workflow?

A. CodeQL will only analyze the languages in the matrix.

B. You can use the languages parameter under the init action.

C. CodeQL excludes alerts for those dependencies specified in the language matrix.

D. CodeQL is configured to run analysis sequentially.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #6

In the pull request, how can developers avoid adding new dependencies with known vulnerabilities?

A. Add a workflow with the dependency review action.

B. Enable Dependabot security updates.

C. Enable Dependabot alerts.

D. Add Dependabot rules.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #7

What role is required to change a repository's code scanning severity threshold that fails a pull request status check?

A. Write

B. Admin

C. Triage

D. Maintain

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free Microsoft GH-500 Demo

Simply submit your e-mail address below to get started with our free demo of your Microsoft GH-500 exam.