Free GH-500 Questions for Microsoft GitHub Advanced Security GH-500 Exam as PDF & Practice Test Engine

Exam Code/Number: GH-500
Exam Name/Title: GitHub Advanced Security
Certification Provider: Microsoft
Corresponding Certification: GitHub Administrator

Exam Questions: 139
Updated On: Aug 20, 2026

Question #1

When secret scanning detects a set of credentials on a public repository, what does GitHub do?

A. It scans the contents of the commits for additional secrets.

B. It notifies the service provider who issued the secret.

C. It sends a notification to repository members.

D. It displays a public alert in the Security tab of the repository.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #2

What does a CodeQL database of your repository contain?

A. a build for Go projects to set up the project

B. a build of the code and extracted data

C. a representation of all of the source code

D. build commands for C/C++, C#, and Java

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #3

The autobuild step in the CodeQL workflow has failed. What should you do?

A. Remove the autobuild step from your code scanning workflow and add specific build steps.

B. Remove specific build steps.

C. Compile the source code.

D. Use CodeQL, which implicitly detects the supported languages in your code base.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #4

By default, where will secret scanning look in a repository in order to execute its job? Each correct answer presents part of the solution. (Choose three.)

A. full commit history

B. all branches

C. selected files in the repository

D. all files in the repository

E. dependencies

Discussion 0

Correct Answer: A,B,C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #5

Which of the following is the best way to dispose of a compromised secret?

A. Revoke the secret.

B. Remove the secret from the code base.

C. Update any services that use the secret.

D. Create a new secret.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #6

How does secret scanning availability differ for public and private repositories on GitHub?

A. Secret scanning is only available for public repositories.

B. Secret scanning is only available for private repositories.

C. Secret scanning is available for both public and private repositories, but the configuration options may differ.

D. Secret scanning is not available for either public or private repositories.

Discussion 0

Correct Answer: C Vote an answer

Question #7

Which of the following is the best way to prevent developers from adding secrets to the repository?

A. Make the repository public.

B. Create a CODEOWNERS file.

C. Enable push protection.

D. Configure a security manager.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #8

Which patterns are secret scanning validity checks available to?

A. high entropy strings

B. push protection patterns

C. partner patterns

D. custom patterns

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Free GH-500 Questions for Microsoft GitHub Advanced Security GH-500 Exam as PDF & Practice Test Engine

Download Free Microsoft GH-500 Demo