What is the primary purpose of enabling secret scanning push protection on a repository?

To block secrets from being pushed to the repository in the first place

To automatically revoke any secrets that are found

To encrypt all secrets stored in the repository

To detect secrets already present in the repository's commit history

How do repositories inherit security configurations from an organization's default configuration?

Repositories automatically inherit the default configuration unless they have a custom configuration

Repositories do not inherit configurations; they must be configured individually

Repositories inherit the default configuration only if they are created after the configuration is set

Repositories must be manually assigned the default configuration

Your organization has a default security configuration that enables CodeQL with default setup. A repository that uses a non-standard build system is not being analyzed correctly by CodeQL. You need to fix the analysis for this repository without affecting other repositories. What should you do?

Modify the default configuration to use advanced setup for all repositories.

Use the repository's settings to change the CodeQL configuration to advanced setup.

Create a custom security configuration that enables CodeQL with advanced setup for the repository, and configure the build steps manually.

Disable CodeQL for the repository and rely on manual security reviews.

GitHubAdvanced Security (GH-500)

Domain 6Objective 2

Configure Security Features and Defaults GH-500 Practice Questions (Page 2)

Part of the GitHub Security suites administration domain, which accounts for 10-15% of the GH-500 exam.

16questions here

4free pages

5concepts

10-15%of the exam

Questions 6–10

6foundation · easy
Which GitHub feature automatically creates a pull request to update a dependency to a secure version when a vulnerability is found?
Select an answer first
7foundation · easy
Which CodeQL setup method requires writing or editing a GitHub Actions workflow file to customize the analysis?
Select an answer first
8foundation · easy
What is the primary purpose of enabling secret scanning push protection on a repository?
Select an answer first
9foundation · easy
How do repositories inherit security configurations from an organization's default configuration?
Select an answer first
10expert · medium
Your organization has a default security configuration that enables CodeQL with default setup. A repository that uses a non-standard build system is not being analyzed correctly by CodeQL. You need to fix the analysis for this repository without affecting other repositories. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.

Configure Security Features and Defaults GH-500 Practice Questions (Page 2)

Questions 6–10

Which GitHub feature automatically creates a pull request to update a dependency to a secure version when a vulnerability is found?

Which CodeQL setup method requires writing or editing a GitHub Actions workflow file to customize the analysis?

What is the primary purpose of enabling secret scanning push protection on a repository?

How do repositories inherit security configurations from an organization's default configuration?

Your organization has a default security configuration that enables CodeQL with default setup. A repository that uses a non-standard build system is not being analyzed correctly by CodeQL. You need to fix the analysis for this repository without affecting other repositories. What should you do?

Keep studying — GitHub Security suites administration