A security team receives a large number of CodeQL alerts from a recent scan. They need to prioritize which alerts to remediate first. They have limited resources and want to focus on the most critical vulnerabilities. Which factor should they consider FIRST when prioritizing alerts?

The severity of the vulnerability as reported by CodeQL.

A combination of severity, exploitability, and business impact.

The business impact of the affected component.

The exploitability of the vulnerability in the context of the application.

A team wants to run CodeQL on a TypeScript repository. They want to include only queries that are relevant to their risk profile, which includes SQL injection and XSS. They also want to exclude queries that are not relevant to their web application. What should they do?

Create a custom query suite that includes only SQL injection and XSS queries.

Use the security-extended suite to get more coverage.

Use the default suite and rely on severity filtering.

Use the default security suite and manually ignore irrelevant alerts.

Which of the following is an example of integrating remediation workflows with security detection?

Automatically creating a GitHub issue for each new security alert

Manually reviewing alerts once a week

Disabling alerts for low-severity findings

A company wants to ensure that CodeQL alerts are not only detected but also resolved in a timely manner. They want to automate the process of creating issues for alerts and assigning them to the responsible developers. What GitHub feature should they use?

Use GitHub's alert assignment and issue creation features in the Security tab.

Use the CodeQL workflow to automatically create issues for alerts.

Use GitHub Actions to create issues for alerts, but this requires custom scripting.

Set up a webhook to create issues in an external system.

What is the primary purpose of a CodeQL query suite?

To specify the build commands for compiling the codebase

To define the programming languages to be analyzed

To configure the authentication for the GitHub repository

To define a set of queries that are run together for a scan

GitHubAdvanced Security (GH-500)

Domain 5Objective 3

Customize and Optimize Security Detection GH-500 Practice Questions (Page 2)

Part of the Security operations: best practices, prioritization, and remediation domain, which accounts for 15-20% of the GH-500 exam.

21questions here

5free pages

6concepts

15-20%of the exam

Questions 6–10

6application · medium
A security team receives a large number of CodeQL alerts from a recent scan. They need to prioritize which alerts to remediate first. They have limited resources and want to focus on the most critical vulnerabilities. Which factor should they consider FIRST when prioritizing alerts?
Select an answer first
7application · medium
A team wants to run CodeQL on a TypeScript repository. They want to include only queries that are relevant to their risk profile, which includes SQL injection and XSS. They also want to exclude queries that are not relevant to their web application. What should they do?
Select an answer first
8foundation · easy
Which of the following is an example of integrating remediation workflows with security detection?
Select an answer first
9application · medium
A company wants to ensure that CodeQL alerts are not only detected but also resolved in a timely manner. They want to automate the process of creating issues for alerts and assigning them to the responsible developers. What GitHub feature should they use?
Select an answer first
10foundation · easy
What is the primary purpose of a CodeQL query suite?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.