Manage and Respond to Secret Protection Alerts GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is required when dismissing a Secret Protection alert?

   • AApproval from a repository administrator
   • BA comment explaining the technical details of the secret
   • CA valid reason selected from a predefined list
   • DProof that the secret was revoked
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which action causes a Secret Protection alert to transition from 'Open' to 'Resolved'?

   • ARevoking the exposed secret
   • BDeleting the repository
   • CAdding a dismissal reason
   • DChanging the alert severity
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the initial status of a Secret Protection alert when a new secret is detected in a repository?

   • AOpen
   • BInactive
   • CResolved
   • DDismissed
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A Secret Protection alert is 'resolved' after the team rotated the secret. Later, the same secret value is detected in another repository. What should the team do?

   • AOpen a new alert for the new detection and verify whether the rotated secret is still valid.
   • BIgnore the new detection because the secret was already rotated.
   • CDismiss the new detection as a false positive because the secret was rotated.
   • DReopen the original alert to track the new detection.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Secret Protection alert flags a string that matches a GitHub token pattern, but the developer confirms it is a test fixture used only in unit tests and never in production. What is the appropriate action?

   • ARevoke the token and rotate it to a new value in the test fixture.
   • BDelete the test fixture file to remove the alert.
   • CLeave the alert open and ignore it until the next security review.
   • DDismiss the alert with the reason 'used in tests' and add a comment explaining the context.
   Reveal Solution Discussion Select an answer first