Control Access, Policies, and Customization GH-500 Practice Questions (Page 3)

Questions 11–12

1. 11foundation · easy

   An organization wants to prevent Secret Protection from generating alerts for secrets found in test configuration files. What should be configured?

   • ACreate a custom secret pattern that matches the test configuration file names.
   • BAdd the test configuration files to the repository's '.gitignore' file.
   • CConfigure an alert exclusion for the path 'test/config/**'.
   • DDisable Secret Protection for the repository containing the test configuration files.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An organization wants to allow the 'AppSec Team' to bypass Secret Protection alerts for their repositories. Which configuration should be used?

   • ACreate a custom secret pattern that matches the team's repository names.
   • BConfigure a delegated bypass policy and add the 'AppSec Team' as the designated team.
   • CDisable Secret Protection for repositories owned by the 'AppSec Team'.
   • DAssign the 'bypass alerts' permission to the 'AppSec Team' role in the organization's role-based access control settings.
   Reveal Solution Discussion Select an answer first