What is the purpose of branch protection rules in enforcing security policies?

To prevent direct pushes to important branches and require pull requests

To rename branches in the repository

To change the default branch of the repository

To automatically delete branches after merging

Your organization wants to delegate the handling of dependency alerts to the application teams, but the security team wants to retain the ability to override decisions. What is the best way to set this up?

Create a custom role for application teams that can manage alerts, and keep security managers as organization admins

Give application teams write access to the repositories

Use a security campaign to manage the alerts

Assign application teams as repository admins

Your organization is subject to a compliance requirement that mandates all code changes be reviewed by at least one person from the security team. You need to enforce this across all repositories. What is the most effective way to implement this governance control?

Create a branch protection rule that requires two reviewers

Create an organization-level ruleset that requires a security team review on pull requests

Ask each repository admin to add the security team as a reviewer

Use a security campaign to track reviews

GitHubAdvanced Security (GH-500)

Domain 5Objective 4

Collaborate Across Roles and Enforce Governance GH-500 Practice Questions (Page 5)

Part of the Security operations: best practices, prioritization, and remediation domain, which accounts for 15-20% of the GH-500 exam.

28questions here

6free pages

8concepts

15-20%of the exam

Questions 21–25

21foundation · easy
What is the purpose of branch protection rules in enforcing security policies?
Select an answer first
22application · medium
Your organization wants to delegate the handling of dependency alerts to the application teams, but the security team wants to retain the ability to override decisions. What is the best way to set this up?
Select an answer first
23application · medium
Your organization is subject to a compliance requirement that mandates all code changes be reviewed by at least one person from the security team. You need to enforce this across all repositories. What is the most effective way to implement this governance control?
Select an answer first
24foundation · easy
Which GitHub feature provides a centralized view to monitor security alerts and compliance across all repositories in an organization?
Select an answer first
25foundation · easy
Which enforcement mechanism can be used to ensure that a security scanning job passes before a pull request can be merged?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.

Collaborate Across Roles and Enforce Governance GH-500 Practice Questions (Page 5)

Questions 21–25

What is the purpose of branch protection rules in enforcing security policies?

Your organization wants to delegate the handling of dependency alerts to the application teams, but the security team wants to retain the ability to override decisions. What is the best way to set this up?

Your organization is subject to a compliance requirement that mandates all code changes be reviewed by at least one person from the security team. You need to enforce this across all repositories. What is the most effective way to implement this governance control?

Which GitHub feature provides a centralized view to monitor security alerts and compliance across all repositories in an organization?

Which enforcement mechanism can be used to ensure that a security scanning job passes before a pull request can be merged?

Keep studying — Security operations: best practices, prioritization, and remediation