Detect, Prioritize, and Respond to Supply Chain Alerts GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a key benefit of using security campaigns to remediate supply chain alerts?

   • AThey allow you to track progress across multiple alerts in one view
   • BThey prevent any new vulnerabilities from being introduced
   • CThey eliminate the need for developers to review changes
   • DThey automatically dismiss alerts that are not critical
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What does the EPSS score primarily indicate about a vulnerability?

   • AThe time required to patch the vulnerability
   • BThe number of affected repositories on GitHub
   • CThe likelihood that a vulnerability will be exploited in the wild
   • DThe severity of the vulnerability based on CVSS
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization receives a high volume of Dependabot alerts, many of which are for low-severity vulnerabilities with low EPSS scores. The security team wants to reduce alert fatigue while still being notified of serious risks. What should they configure?

   • AManually review and dismiss each low-risk alert
   • BDisable Dependabot alerts for all repositories
   • CAuto-dismiss alerts with low EPSS scores and low severity
   • DIncrease the frequency of Dependabot scans
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team is creating a security campaign to remediate a vulnerability in a library that is used in both production and development dependencies. They want to prioritize production dependencies, but the campaign tool does not distinguish between them. What should they do?

   • AUse a single campaign and manually track production dependencies
   • BExclude development dependencies from the campaign
   • CCreate separate campaigns for production and development dependencies
   • DInclude all dependencies in one campaign and remediate them in any order
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A team is remediating a Dependabot alert for a vulnerability in a Python package. The patched version is available, but it requires a newer version of Python than the project currently uses. What should the team do?

   • AKeep the current Python version and dismiss the alert
   • BUse a different dependency that does not require a newer Python version
   • CUpdate the Python version and the dependency in a pull request
   • DDowngrade the dependency to an older version
   Reveal Solution Discussion Select an answer first