Free GitHub-Advanced-Security Questions for GitHub Advanced Security GHAS GitHub-Advanced-Security Exam as PDF & Practice Test Engine
What do you need to do before you can define a custom pattern for a repository?
Correct Answer: A
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Which of the following options would close a Dependabot alert?
Correct Answer: D
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
When configuring code scanning with CodeQL, what are your options for specifying additional queries?
(Each answer presents part of the solution. Choose two.)
(Each answer presents part of the solution. Choose two.)
Correct Answer: A,B
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
As a repository owner, you do not want to run a GitHub Actions workflow when changes are made to any .txt or markdown files. How would you adjust the event trigger for a pull request that targets the main branch?
(Each answer presents part of the solution. Choose three.)
* on:
* pull_request:
* branches: [main]
(Each answer presents part of the solution. Choose three.)
* on:
* pull_request:
* branches: [main]
Correct Answer: A,B,C
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Which of the following is the best way to prevent developers from adding secrets to the repository?
Correct Answer: C
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
A dependency has a known vulnerability. What does the warning message include?
Correct Answer: B
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Assuming security and analysis features are not configured at the repository, organization, or enterprise level, secret scanning is enabled on:
Correct Answer: B
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Why should you dismiss a code scanning alert?
Correct Answer: D
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
0
0
0
10
