...
Verified Content • 24/7 Access • Free Updates

Exam overview

Microsoft GH-500 Exam Dumps

Vendor

Microsoft

Exam Code

GH-500

Actual Exam Duration

 100 Minutes

TOTAL QUESTIONS

75

Exam Name

GitHub Advanced Security Exam

Purchase

$ 40

One-time payment • Instant access

Exam practice

Exam Q&A

Select an option, then click Show Answer.

Q1: '-- [Configure and Use Code Scanning] After investigating a code scanning alert related to injection, you determine that the input is properly sanitized using custom logic. What should be your next step?

A: Draft a pull request to update the open-source query.

B: Ignore the alert.

C: Open an issue in the CodeQL repository.

D: Dismiss the alert with the reason 'false positive.'

Correct Answer: D

Q2: '-- [Configure and Use Secret Scanning] How many alerts are created when two instances of the same secret value are in the same repository?

A: 1

B: 2

C: 3

D: 4

Correct Answer: A

Q3: '-- [Configure GitHub Advanced Security Tools in GitHub Enterprise] What role is required to change a repository's code scanning severity threshold that fails a pull request status check?

A: Maintain

B: Write

C: Triage

D: Admin

Correct Answer: D

Q4: '-- [Use Code Scanning with CodeQL] When using the advanced CodeQL code scanning setup, what is the name of the workflow file?

A: codeql-config.yml

B: codeql-scan.yml

C: codeql-workflow.yml

D: codeql-analysis.yml

Correct Answer: D

Q5: '-- [Configure and Use Dependency Management] In the pull request, how can developers avoid adding new dependencies with known vulnerabilities?

A: Enable Dependabot alerts.

B: Add Dependabot rules.

C: Add a workflow with the dependency review action.

D: Enable Dependabot security updates.

Correct Answer: C

- Testimonials -

Real Results From Real Students

John Doe
John Doe
This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.
Emma
Emma
I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.
Liam
Liam
I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.
Isabella
Isabella
If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.
Benjamin
Benjamin
This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.