Control Access, Policies, and Customization GH-500 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of configuring alert recipients for Secret Protection?

   • ATo specify which repositories are scanned for secrets.
   • BTo define the severity levels of alerts that are generated.
   • CTo determine which secrets are detected by the scanning engine.
   • DTo control which users or teams receive notifications when a secret is detected.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of an alert exclusion in Secret Protection?

   • ATo define custom patterns for detecting organization-specific secrets.
   • BTo allow specific users to bypass alerts without approval.
   • CTo specify which users or teams receive alert notifications.
   • DTo prevent alerts from being generated for specified paths or patterns.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An organization wants to allow its security engineers to bypass Secret Protection alerts without requiring individual approval for each alert. Which configuration should be used?

   • ADisable Secret Protection for repositories owned by the security engineers.
   • BAssign the bypass permission to the security engineer role in the organization's role-based access control settings.
   • CCreate a custom secret pattern that matches the security engineers' usernames to automatically suppress their alerts.
   • DAdd each security engineer to a team and configure a delegated bypass policy for that team.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An organization has a custom secret pattern that is no longer needed. What is the correct way to remove it from Secret Protection?

   • ADisable the pattern in the organization's security settings.
   • BRemove the pattern from the repository's '.github' directory.
   • CEdit the pattern to change its regular expression to something that never matches.
   • DDelete the pattern from the organization's security settings.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of creating a custom secret pattern in Secret Protection?

   • ATo detect organization-specific secrets that are not covered by default patterns.
   • BTo specify which users or teams receive alert notifications.
   • CTo allow specific roles to bypass alerts without approval.
   • DTo exclude certain file paths from secret scanning to reduce noise.
   Reveal Solution Discussion Select an answer first