If a repository in an organization has a custom security configuration, how does that affect the organization's default security configuration?

The custom configuration overrides the default configuration for that repository

The default configuration overrides the custom configuration

The repository is excluded from all security configurations

The repository inherits both configurations and merges them

Which security features can be included in a default security configuration?

Two-factor authentication and SAML SSO

CodeQL, secret scanning, and dependency review

Branch protection rules and required reviews

What is the primary purpose of the dependency graph in GitHub?

To show the dependencies of a repository and their relationships

To block the use of insecure dependencies

To alert on known vulnerabilities in dependencies

To automatically fix vulnerable dependencies

Your organization has just enabled secret scanning for all repositories via an organization-level default configuration. You now want to ensure that developers cannot accidentally commit secrets to any repository in the organization. What additional step should you take?

Enable Dependabot alerts for all repositories.

Create a custom security configuration that enables secret scanning with push protection, and apply it to each repository individually.

Enable push protection for all repositories in the same default configuration.

Enable code scanning with CodeQL for all repositories.

GitHubAdvanced Security (GH-500)

Domain 6Objective 2

Configure Security Features and Defaults GH-500 Practice Questions (Page 1)

Part of the GitHub Security suites administration domain, which accounts for 10-15% of the GH-500 exam.

16questions here

4free pages

5concepts

10-15%of the exam

Questions 1–5

1foundation · easy
If a repository in an organization has a custom security configuration, how does that affect the organization's default security configuration?
Select an answer first
2foundation · easy
Which security features can be included in a default security configuration?
Select an answer first
3foundation · easy
Which GitHub Advanced Security feature is designed to detect secrets that have already been committed to a repository's history?
Select an answer first
4foundation · easy
What is the primary purpose of the dependency graph in GitHub?
Select an answer first
5application · medium
Your organization has just enabled secret scanning for all repositories via an organization-level default configuration. You now want to ensure that developers cannot accidentally commit secrets to any repository in the organization. What additional step should you take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.