Free Microsoft GH-500 Practice Test & Real Exam Questions
Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? Each answer presents part of the solution. (Choose three.)
Correct Answer: B,C,E
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
What role is required to change a repository's code scanning severity threshold that fails a pull request status check?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
To be compatible with code scanning, what data format must third-party code scanning tools use for output?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Why should you dismiss a code scanning alert?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Which of the following Watch settings could you use to get Dependabot alert notifications? Each answer presents part of the solution. (Choose two.)
Correct Answer: B,C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
What does code scanning do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Hotspot Question
You have a GitHub Enterprise Cloud Organization that uses GitHub Advanced Security and manages security features by using custom security configurations.
You create a custom security configuration named Baseline1.
You need to configure Baseline1 as the default security configuration for new repositories. The solution must ensure that Baseline1 is applied automatically to all newly created repositories in the organization.
How should you complete the REST API request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a GitHub Enterprise Cloud Organization that uses GitHub Advanced Security and manages security features by using custom security configurations.
You create a custom security configuration named Baseline1.
You need to configure Baseline1 as the default security configuration for new repositories. The solution must ensure that Baseline1 is applied automatically to all newly created repositories in the organization.
How should you complete the REST API request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Box 1: CONFIGURATION_ID \
The GitHub REST API endpoint to set a code security configuration as the default for an enterprise or organization uses the format PUT /enterprises/{enterprise}/code- security/configurations/{configuration_id}. Using CONFIGURATION_ID correctly specifies the particular configuration being marked as default, while providing the body payload
{"default_for_repos":"all"} to indicate that it applies automatically to all new repositories.
Incorrect:
CONFIGURATION_ID/defaults: This syntax is incorrect because /defaults is not part of the path configuration URL schema when marking an individual configuration as the repository default CONFIGURATION_ID/policy: This path is invalid. Custom security policies are handled separately, and the configuration-specific setting does not append /policy to the target URI.
default/configurations: This ordering reverses the standard collection-resource layout of GitHub's REST endpoints, which always begins with the base collection /code-security/configurations/ followed by an identity indicator.
Box 2: all
Setting default_for_repos to "all" ensures that the given code security configuration becomes the automatic default applied to all newly created repositories across the enterprise/organization scope.
Reference:
https://docs.github.com/rest/code-security/configurations
Assuming that default security and analysis settings have not been changed at the repository, organization, or enterprise level, which scenario would generate a dependency graph for the repository?
Correct Answer: A
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
