Collaborate Across Roles and Enforce Governance GH-500 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   When collaborating on a security alert, which action can a user with write access take to formally indicate that the alert is being handled and to track progress?

   • AAssign the alert to a team member
   • BChange the repository name
   • CDisable GitHub Advanced Security
   • DDelete the alert
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   Your organization has a large number of code scanning alerts across multiple repositories. To ensure accountability, you want to assign each alert to the team that owns the affected code. What is the most efficient way to assign alert ownership?

   • AUse the GitHub API to programmatically assign alerts based on code ownership
   • BManually assign each alert in the GitHub UI
   • CUse branch protection rules to assign alerts
   • DCreate a security campaign to assign alerts to teams
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   Your organization uses GitHub Advanced Security. The security team is overwhelmed with dependency alerts and wants to delegate the handling of low-severity alerts to the development team. The development team should be able to view, comment on, and close these alerts, but they should not be able to change the security configuration. What is the most effective way to delegate this responsibility?

   • AGrant the development team write access to the repositories
   • BAssign the development team as repository admins
   • CAdd the development team to the security manager role
   • DCreate a custom repository role with triage permissions on security alerts
   Reveal Solution Discussion Select an answer first