Microsoft GH-500 - GitHub Advanced Security Exam
Page: 3 / 26
Total 127 questions
Question #11 (Topic: Topic 1, Describe the GHAS security features and functionality
)
Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?
A. usernames
B. sealed boxes
C. Personal Identifiable Information (PII)
D. private keys
Answer: D
Question #12 (Topic: Topic 1, Describe the GHAS security features and functionality
)
What is the best method to ensure all new code is scanned for vulnerabilities?
A. Add the extended suite.
B. Configure code scanning.
C. Set up a security policy.
D. Configure code owners.
Answer: B
Question #13 (Topic: Topic 1, Describe the GHAS security features and functionality
)
HOTSPOT
You have a GitHub Enterprise Cloud Organization that uses GitHub Advanced Security and manages security features by using custom security configurations.
You create a custom security configuration named Baseline1.
You need to configure Baseline1 as the default security configuration for new repositories. The solution must ensure that Baseline1 is applied automatically to all newly created repositories in the organization.
How should you complete the REST API request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a GitHub Enterprise Cloud Organization that uses GitHub Advanced Security and manages security features by using custom security configurations.
You create a custom security configuration named Baseline1.
You need to configure Baseline1 as the default security configuration for new repositories. The solution must ensure that Baseline1 is applied automatically to all newly created repositories in the organization.
How should you complete the REST API request? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer: 
Question #14 (Topic: Topic 1, Describe the GHAS security features and functionality
)
HOTSPOT
You have a GitHub Enterprise Cloud Organization that uses GitHub Code Security.
You need to create a security campaign to remediate cross-site scripting (XSS) vulnerabilities identified by code scanning. The campaign must meet the following requirements:
• Include only alerts that support automatic remediation.
• Include only alerts associated with cross-site scripting (CWE-79).
• Enable eligible security administrators to manage and track the campaign.
How should you configure the campaign? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a GitHub Enterprise Cloud Organization that uses GitHub Code Security.
You need to create a security campaign to remediate cross-site scripting (XSS) vulnerabilities identified by code scanning. The campaign must meet the following requirements:
• Include only alerts that support automatic remediation.
• Include only alerts associated with cross-site scripting (CWE-79).
• Enable eligible security administrators to manage and track the campaign.
How should you configure the campaign? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer: 
Question #15 (Topic: Topic 2, Configure and use secret scanning
)
What is the first step you should take to fix an alert in secret scanning?
A. Remove the secret in a commit to the main branch.
B. Archive the repository.
C. Update your dependencies.
D. Revoke the alert if the secret is still valid.
Answer: D
