A developer with read access to a repository wants to view code scanning alerts. However, they cannot see them. What is the most likely reason?

Read access is insufficient to view code scanning alerts; write access is required.

The repository has not enabled code scanning.

The developer is not a security manager.

The developer has not enabled GitHub Advanced Security for their account.

In a GitHub repository with GitHub Advanced Security enabled, which role is required to view security alerts for the repository?

Users with write access or the security manager role

Any user with read access to the repository

What type of security alert information is available during the code review stage of the SDLC?

Dependency review alerts for all dependencies in the repository

Secret scanning alerts for secrets already committed to the repository

Code scanning alerts on new code introduced in the pull request

A developer is working on a feature branch and wants to see if any of the dependencies they are about to add have known vulnerabilities before committing. Which GitHub Advanced Security feature provides this information at the earliest point in the development cycle?

Dependency review on the pull request

Code scanning alerts on the pull request

Dependabot alerts on the pull request

Dependabot alerts on the default branch

A repository admin wants to ensure that all code scanning alerts are dismissed with a reason, and that only security managers can dismiss them. What should they configure?

Create a custom GitHub Action that enforces a dismissal reason for all alerts.

Use branch protection to require code scanning to pass and set the alert dismissal permissions to 'Repository admins only'.

Set the repository's alert dismissal permissions to 'Security managers only' and enable the 'Require dismissal reason' option.

Assign the security manager role to the repository admin and enable the 'Require dismissal reason' option.

GitHubAdvanced Security (GH-500)

Domain 1Objective 4

Manage Access, Governance, and Supply Chain Security GH-500 Practice Questions (Page 1)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

20questions here

4free pages

6concepts

15-20%of the exam

Questions 1–5

1application · medium
A developer with read access to a repository wants to view code scanning alerts. However, they cannot see them. What is the most likely reason?
Select an answer first
2foundation · easy
In a GitHub repository with GitHub Advanced Security enabled, which role is required to view security alerts for the repository?
Select an answer first
3foundation · easy
What type of security alert information is available during the code review stage of the SDLC?
Select an answer first
4application · medium
A developer is working on a feature branch and wants to see if any of the dependencies they are about to add have known vulnerabilities before committing. Which GitHub Advanced Security feature provides this information at the earliest point in the development cycle?
Select an answer first
5application · medium
A repository admin wants to ensure that all code scanning alerts are dismissed with a reason, and that only security managers can dismiss them. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.