Apply Secure SDLC and Security Strategies GH-500 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is planning to implement GitHub Advanced Security across their SDLC. They have a mix of legacy and modern applications. They want to ensure that security checks are integrated into the CI/CD pipeline without causing significant delays. Which approach best achieves this?

   • AUse a separate security team to manually review all code changes.
   • BEnable code scanning on pull requests and secret scanning with push protection, and use Dependabot for dependency monitoring.
   • CEnable all security features on all repositories without any configuration.
   • DRun all security checks only on a nightly basis.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of security campaigns in GitHub Advanced Security?

   • ATo provide real-time alerts for active attacks
   • BTo systematically track and remediate security debt across many repositories
   • CTo automatically fix all security vulnerabilities without developer involvement
   • DTo replace code scanning and secret scanning
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A team wants to catch security issues as early as possible in the development process, before code is merged. Which strategy best aligns with this goal?

   • APrevention-first security
   • BGate-based security
   • CCompliance-only security
   • DReactive security
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   During the planning phase of the SDLC, which GitHub security feature can help developers avoid introducing known vulnerable dependencies from the start?

   • ASecret scanning
   • BCode scanning
   • CSecurity campaigns
   • DDependabot alerts
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A developer is confused about why they received both a secret scanning alert and a code scanning alert for the same pull request. What is the most likely reason?

   • AThe secret scanning alert is a false positive, and code scanning is correct.
   • BThe pull request contains both a hardcoded secret and a code vulnerability.
   • CThe code scanning alert is a false positive, and secret scanning is correct.
   • DThe two features are the same and generate duplicate alerts.
   Reveal Solution Discussion Select an answer first