What does SBOM stand for in the context of supply chain security?

Systematic Binary Object Management

An organization has a repository where a security manager needs to view and manage alerts, but the security manager is not a member of the repository. The organization wants to grant the security manager access without adding them as a collaborator. What is the best way to achieve this?

Add the security manager as a collaborator with write access.

Use the security manager role at the organization level, which grants access to alerts without requiring repository membership.

Add the security manager to a team that has access to the repository.

Use the delegated bypass feature to grant the security manager access to alerts.

How does GitHub Advanced Security enforce security policies in a repository?

By disabling the repository if a critical vulnerability is found

By automatically fixing all vulnerabilities

By providing alerts and requiring manual review for dismissals

By blocking code pushes that introduce vulnerabilities

During which stage of the SDLC does GitHub Advanced Security provide alerts about vulnerable dependencies?

Only after deployment to production

Only during code review by a security team

During code development and in pull requests

GitHubAdvanced Security (GH-500)

Domain 1Objective 4

Manage Access, Governance, and Supply Chain Security GH-500 Practice Questions (Page 3)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

20questions here

4free pages

6concepts

15-20%of the exam

Questions 11–15

11foundation · easy
What does SBOM stand for in the context of supply chain security?
Select an answer first
12expert · hard
An organization has a repository where a security manager needs to view and manage alerts, but the security manager is not a member of the repository. The organization wants to grant the security manager access without adding them as a collaborator. What is the best way to achieve this?
Select an answer first
13foundation · easy
How does GitHub Advanced Security enforce security policies in a repository?
Select an answer first
14foundation · easy
During which stage of the SDLC does GitHub Advanced Security provide alerts about vulnerable dependencies?
Select an answer first
15foundation · easy
Which GitHub role has the permission to dismiss security alerts in a repository?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.