GITHUB

GitHub Advanced Security (GH-500)

GH-500

The GitHub Advanced Security certification validates your expertise in securing code and workflows with GitHub's advanced security features. Designed for security professionals and developers, this certification demonstrates your ability to identify vulnerabilities, implement security controls, and protect the software supply chain. Earning it signals that you can proactively harden GitHub environments against evolving threats.

Practice Free Questions

6Domains

25Objectives

117Practice pages

537Free questions

GH-500 free practice questions

Choose any objective and open any question page — no sign-in required.

Understand GitHub Security suites and architecture

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Apply secure SDLC and security strategies

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

Detect, manage, and respond to security alerts

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

Manage access, governance, and supply chain security

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Enable and configure Secret Protection

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

Prevent secret exposure

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Manage and respond to Secret Protection alerts

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Control access, policies, and customization

12 questions · 3 pages

Questions 1–5 6–10 11–12

Understand and manage dependency and supply chain risks

14 questions · 3 pages

Questions 1–5 6–10 11–14

Detect, prioritize, and respond to supply chain alerts

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Secure dependencies during development

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Configure policies, permissions, and integrations

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Understand code scanning approaches and tooling

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Set up and configure Code Security

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Analyze, triage, and remediate code scanning results

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Optimize and automate Code Security operations

12 questions · 3 pages

Questions 1–5 6–10 11–12

Understand vulnerability context and remediation frameworks

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Prioritize and manage security work at scale

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Customize and optimize security detection

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Collaborate across roles and enforce governance

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Shift left and strengthen preventive security

11 questions · 3 pages

Questions 1–5 6–10 11–11

Roll out and manage security features at scale

13 questions · 3 pages

Questions 1–5 6–10 11–13

Configure security features and defaults

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

Define governance, access, and Code Security workflows

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Manage CodeQL and security automation

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (25 objectives · 117 pages).

GitHub Advanced Security (GH-500)

GH-500 free practice questions

Domain 1 · Describe GitHub Security suites, features, and ecosystem21% of practice bank · 4 objectives · 111 questions21%

Domain 2 · Configure and use Secret Protection (formerly secret scanning)15% of practice bank · 4 objectives · 78 questions15%

Domain 3 · Configure and use supply chain security (formerly Dependabot/Dependency Review)17% of practice bank · 4 objectives · 93 questions17%

Domain 4 · Configure and use Code Security (formerly Code Scanning with CodeQL)15% of practice bank · 4 objectives · 82 questions15%

Domain 5 · Security operations: best practices, prioritization, and remediation20% of practice bank · 5 objectives · 107 questions20%

Domain 6 · GitHub Security suites administration12% of practice bank · 4 objectives · 66 questions12%