Configure Security Features and Defaults GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An organization wants to enable CodeQL code scanning on a repository with minimal manual configuration, using GitHub's recommended default settings. Which setup method should be used?

   • AAutomated setup
   • BDefault setup
   • CManual setup
   • DAdvanced setup
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   Your organization has a default security configuration that enables secret scanning with push protection. A developer reports that they cannot push a commit that contains a test API key, even though the key is not a real secret. What should you do to allow this push while maintaining security?

   • ADisable push protection for the repository.
   • BAdd the test API key to the organization's secret scanning allowlist.
   • CIgnore the push protection error and force push the commit.
   • DAsk the developer to use a different key format that is not detected.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of a default security configuration in a GitHub organization?

   • ATo provide a template for creating new repositories
   • BTo override any repository-level security settings
   • CTo automatically fix all security vulnerabilities in the organization
   • DTo apply a baseline set of security features to all current and future repositories
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   Your organization has a default security configuration that enables secret scanning with push protection. A repository that was previously excluded from the default configuration is now included. The repository has a custom configuration that disables push protection. What happens to the repository's push protection setting?

   • AThe repository must be manually configured to determine which setting applies.
   • BThe repository inherits the default configuration, and the custom configuration is ignored.
   • CThe default configuration overrides the custom configuration, so push protection is enabled.
   • DThe custom configuration takes precedence, so push protection remains disabled.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Your organization has a default security configuration that enables CodeQL with default setup and secret scanning with push protection. A new repository is created for a proof-of-concept project that should not have push protection enabled because developers frequently push test secrets. What should you do?

   • ADisable secret scanning entirely for the new repository.
   • BCreate a custom security configuration that disables push protection, and apply it to the new repository.
   • CLeave the default configuration as is and accept that push protection will block test secrets.
   • DRemove the new repository from the organization.
   Reveal Solution Discussion Select an answer first