Define Governance, Access, and Code Security Workflows GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to enable code scanning on all repositories in its organization. They want to use the default CodeQL workflow provided by GitHub, but they need to ensure that the workflow is automatically enabled for all new repositories created in the future. What is the most efficient way to achieve this?

   • ACreate a custom CodeQL workflow and add it to each repository's .github/workflows directory.
   • BEnable code scanning in the organization's security settings and set the default to 'Enabled' for all repositories.
   • CCreate a repository template that includes the CodeQL workflow and use it for all new repositories.
   • DUse the GitHub API to enable code scanning on each repository individually.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of enabling a default CodeQL workflow in GitHub code scanning?

   • ATo automatically run CodeQL analysis on pushes to the repository.
   • BTo provide a static analysis of the code without any configuration.
   • CTo manually trigger CodeQL analysis only when requested by an administrator.
   • DTo scan the code only during the initial repository setup.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which GitHub role has the permission to dismiss security alerts in a repository?

   • ABilling manager
   • BDeveloper
   • CSecurity manager
   • DRepository viewer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to ensure that all repositories use the same CodeQL configuration, including the same query suite and build mode. They want to avoid maintaining separate workflow files for each repository. What is the most efficient way to achieve this?

   • AUse the GitHub API to push the same workflow file to all repositories.
   • BCreate a custom CodeQL workflow and add it to each repository's .github/workflows directory.
   • CEnable code scanning in the organization's security settings and set the default to 'Enabled'.
   • DUse a GitHub Action that references a central workflow file from a shared repository.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization has a ruleset that requires linear history on all branches. However, the 'develop' branch is used for integration and frequently has merge commits. The team wants to allow merge commits on the develop branch while keeping the linear history requirement on other branches. What is the best way to configure this?

   • ADisable the linear history requirement for the entire repository.
   • BAdd the 'develop' branch to the bypass list for the ruleset.
   • CUse the GitHub API to update the ruleset to exclude the develop branch.
   • DCreate a separate ruleset for the 'develop' branch that does not require linear history.
   Reveal Solution Discussion Select an answer first