Which of the following is an appropriate action when triaging a Dependabot alert in the GitHub UI?

Changing the repository's visibility

Deleting the alert from the repository

Viewing the alert details and affected dependency

An organization wants to automatically create a GitHub issue whenever a new high-severity Dependabot alert is opened in any repository. Which approach should an administrator configure?

Configure a GitHub Actions workflow that triggers on the 'dependabot-alerts' webhook event and creates an issue.

Use the GitHub mobile app to receive push notifications and manually create issues.

Set up a scheduled workflow that runs every hour and queries the API for all alerts.

Enable Dependabot alerts and manually check each repository daily.

Which activity is typically performed by the security team rather than individual developers?

Committing a code change to address a code scanning alert

Rotating a personal access token

Fixing a specific vulnerability in a dependency

Setting organization-wide alert policies

GitHubAdvanced Security (GH-500)

Domain 1Objective 3

Detect, Manage, and Respond to Security Alerts GH-500 Practice Questions (Page 3)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

33questions here

7free pages

9concepts

15-20%of the exam

Questions 11–15

11foundation · easy
Which GitHub feature automatically monitors a repository's dependency manifest files and raises alerts when a known vulnerable version is detected?
Select an answer first
12foundation · easy
Which of the following is an appropriate action when triaging a Dependabot alert in the GitHub UI?
Select an answer first
13foundation · easy
Which GitHub feature can be used to automatically create an issue when a new security alert is opened?
Select an answer first
14application · medium
An organization wants to automatically create a GitHub issue whenever a new high-severity Dependabot alert is opened in any repository. Which approach should an administrator configure?
Select an answer first
15foundation · easy
Which activity is typically performed by the security team rather than individual developers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.

Detect, Manage, and Respond to Security Alerts GH-500 Practice Questions (Page 3)

Questions 11–15

Which GitHub feature automatically monitors a repository's dependency manifest files and raises alerts when a known vulnerable version is detected?

Which of the following is an appropriate action when triaging a Dependabot alert in the GitHub UI?

Which GitHub feature can be used to automatically create an issue when a new security alert is opened?

An organization wants to automatically create a GitHub issue whenever a new high-severity Dependabot alert is opened in any repository. Which approach should an administrator configure?

Which activity is typically performed by the security team rather than individual developers?

Keep studying — Describe GitHub Security suites, features, and ecosystem