A developer uses Copilot to generate a function that handles user input validation. The code passes unit tests but the developer is concerned about security vulnerabilities. What should the developer do to ensure the code is safe for production?

Commit the code as-is because it passes tests and is likely secure

Ask GitHub to provide a security audit for the generated code

Perform a security review, including checking for common vulnerabilities like SQL injection and XSS

Use Copilot to generate a security test suite and rely on that

A developer is concerned about the legal implications of using code snippets generated by Copilot that may resemble existing open-source code. What should the developer do to mitigate this risk?

Avoid using Copilot for any code that might be similar to open-source code

Assume the code is original and use it without any checks

Use a code search tool to check for similarities with existing open-source code and review the license

Ask GitHub to provide a license for the generated code

A developer is working on a project for a client. The client has a policy that all code must be original and not copied from open-source projects. The developer uses Copilot to generate code. What should the developer do to comply with the client's policy?

Ask the client to waive the originality policy for AI-generated code

Avoid using Copilot entirely for this project

Review the generated code for similarities with open-source code and rewrite any that are too similar

Use Copilot-generated code as-is because it is original

Which of the following is a known limitation of GitHub Copilot outputs?

Suggestions are limited to public domain code

Suggestions are always original and free from licensing issues

Suggestions may contain security vulnerabilities or bugs

Suggestions are guaranteed to compile without errors

A developer wants to ensure that Copilot does not use the contents of a file containing API keys when generating suggestions. They are using Visual Studio Code. What is the most effective way to achieve this?

Use the `github.copilot.advanced.exclude` setting in VS Code to exclude the file

Rename the file with a `.secret` extension so Copilot ignores it

Encrypt the file so Copilot cannot read it

Add the file to the `.gitignore` so it is not tracked by Git

GitHubCopilot Certification

Domain 6Objective 1

Manage Privacy Settings and Exclusions GH-300 Practice Questions (Page 1)

Part of the Configure privacy, content exclusions, and safeguards domain, which accounts for 10-15% of the GH-300 exam.

13questions here

3free pages

4concepts

10-15%of the exam

Questions 1–5

1expert · medium
A developer uses Copilot to generate a function that handles user input validation. The code passes unit tests but the developer is concerned about security vulnerabilities. What should the developer do to ensure the code is safe for production?
Select an answer first
2application · medium
A developer is concerned about the legal implications of using code snippets generated by Copilot that may resemble existing open-source code. What should the developer do to mitigate this risk?
Select an answer first
3expert · medium
A developer is working on a project for a client. The client has a policy that all code must be original and not copied from open-source projects. The developer uses Copilot to generate code. What should the developer do to comply with the client's policy?
Select an answer first
4foundation · easy
Which of the following is a known limitation of GitHub Copilot outputs?
Select an answer first
5application · medium
A developer wants to ensure that Copilot does not use the contents of a file containing API keys when generating suggestions. They are using Visual Studio Code. What is the most effective way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-300” is a trademark of its owner, used for identification only.