What is the primary responsibility of a developer when a secret scanning alert is triggered for a token they committed?

Change the repository's visibility to private

Ignore the alert if the token is for a test environment

Rotate the exposed secret immediately

What is the primary source of code scanning alerts?

Scanning for known secret patterns

Comparing dependency versions against a vulnerability database

Static analysis of the repository's source code

Monitoring user activity for suspicious behavior

What is a key responsibility of the security team regarding security alerts?

Disabling all alerts to reduce noise

Overseeing remediation efforts and ensuring they are completed

Only focusing on critical alerts and ignoring others

Writing all the code fixes for every alert

A developer is triaging a code scanning alert that flags a potential buffer overflow in a C++ function. The developer believes the code is safe because the input is validated elsewhere. What is the best course of action?

Assign the alert to a senior developer for review.

Review the code path and the alert details to confirm whether the vulnerability is real, then dismiss or fix accordingly.

Fix the code immediately to prevent any potential issue.

Dismiss the alert as a false positive without further investigation.

What is the administrator's role in enabling GitHub Advanced Security features?

Enabling the features for the organization or repositories

GitHubAdvanced Security (GH-500)

Domain 1Objective 3

Detect, Manage, and Respond to Security Alerts GH-500 Practice Questions (Page 2)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

33questions here

7free pages

9concepts

15-20%of the exam

Questions 6–10

6foundation · easy
What is the primary responsibility of a developer when a secret scanning alert is triggered for a token they committed?
Select an answer first
7foundation · easy
What is the primary source of code scanning alerts?
Select an answer first
8foundation · easy
What is a key responsibility of the security team regarding security alerts?
Select an answer first
9application · medium
A developer is triaging a code scanning alert that flags a potential buffer overflow in a C++ function. The developer believes the code is safe because the input is validated elsewhere. What is the best course of action?
Select an answer first
10foundation · easy
What is the administrator's role in enabling GitHub Advanced Security features?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.