In GitHub Advanced Security, what is the primary purpose of assigning a security alert to a specific user or team?

To automatically fix the vulnerability without human intervention

To restrict access to the alert to only the assigned user or team

To permanently dismiss the alert from the security tab

To designate responsibility for triaging and resolving the alert

What is a webhook in the context of GitHub?

A tool for scanning code for vulnerabilities

A method for storing secrets in GitHub

An HTTP callback that delivers event payloads to a specified URL

What is the purpose of the Dependency Review feature in GitHub?

To analyze dependency changes in pull requests for security and license risks

To generate a software bill of materials for the repository

To block all pull requests that change dependencies

To automatically merge pull requests that update dependencies

You are setting up a webhook to send security alert events to an external system. You want to ensure that the webhook is secure and that the external system can verify the authenticity of the events. What is the best practice?

Use a GitHub Actions workflow to send the events instead of a webhook.

Use the GitHub API to send events to the external system.

Use a public URL for the webhook without any authentication.

Use a secret token in the webhook configuration and verify the signature in the external system.

Where can an organization owner configure the default permissions for who can manage security alerts across all repositories?

Organization settings > Security

Repository settings > Collaborators

Organization settings > Member privileges

GitHubAdvanced Security (GH-500)

Domain 3Objective 4

Configure Policies, Permissions, and Integrations GH-500 Practice Questions (Page 1)

Part of the Configure and use supply chain security (formerly Dependabot/Dependency Review) domain, which accounts for 15-20% of the GH-500 exam.

25questions here

5free pages

7concepts

15-20%of the exam

Questions 1–5

1foundation · easy
In GitHub Advanced Security, what is the primary purpose of assigning a security alert to a specific user or team?
Select an answer first
2foundation · easy
What is a webhook in the context of GitHub?
Select an answer first
3foundation · easy
What is the purpose of the Dependency Review feature in GitHub?
Select an answer first
4expert · hard
You are setting up a webhook to send security alert events to an external system. You want to ensure that the webhook is secure and that the external system can verify the authenticity of the events. What is the best practice?
Select an answer first
5foundation · easy
Where can an organization owner configure the default permissions for who can manage security alerts across all repositories?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.