Manage and Respond to Secret Protection Alerts GH-500 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the effect of dismissing a Secret Protection alert?

   • AThe alert is closed and marked as 'Dismissed', with a reason recorded.
   • BThe alert is permanently deleted from the repository's alert list.
   • CThe alert is reopened automatically if the secret is still present.
   • DThe alert transitions to 'Resolved' and the secret is automatically revoked.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A developer receives a Secret Protection alert for an AWS access key committed in a public repository. The key is actively used in production. What is the most immediate and appropriate remediation action?

   • AChange the repository visibility from public to private to hide the key.
   • BRevoke the key in AWS and rotate it to a new key, then update the repository to remove the exposed key.
   • CDismiss the alert as a false positive because the key is used in production.
   • DDelete the repository to remove the exposed key from public view.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When a Secret Protection alert is confirmed to be a real secret, what is the first step in the remediation process?

   • ARevoke or rotate the exposed secret
   • BUpdate the code to remove the secret from the repository
   • CChange the repository visibility to private
   • DDismiss the alert as a false positive
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following correctly lists the typical stages of a Secret Protection alert from creation to resolution?

   • ACreated → Open → Closed
   • BOpen → Resolved or Dismissed
   • COpen → Dismissed → Resolved
   • DOpen → Resolved → Dismissed
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a best practice when triaging Secret Protection alerts?

   • AResolve alerts without verifying the secret is valid
   • BPrioritize alerts for secrets that grant access to critical systems
   • CIgnore alerts for secrets that are only in the commit history
   • DDismiss all alerts that appear in test files
   Reveal Solution Discussion Select an answer first