Manage CodeQL and Security Automation GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following best describes the default trigger events for the default CodeQL workflow that GitHub generates for a repository?

   • AA push to any branch and a daily schedule
   • BA push to the default branch and a weekly schedule
   • CA weekly schedule and pull requests targeting the default branch
   • DOnly a manual workflow_dispatch trigger
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which automation technique can be used to enforce that all repositories in an organization have CodeQL enabled?

   • AA repository template that includes CodeQL, but only for new repositories
   • BA GitHub Pages site that displays the security status of repositories
   • CA GitHub Actions workflow that runs on a schedule and checks each repository's configuration, opening an issue if CodeQL is not enabled
   • DA GitHub App that automatically fixes all code vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which GitHub API endpoint is commonly used to enable the default CodeQL setup for a repository programmatically?

   • APOST /repos/{owner}/{repo}/code-scanning/analyses
   • BGET /repos/{owner}/{repo}/code-scanning/codeql
   • CPATCH /repos/{owner}/{repo}/code-scanning/alerts
   • DPUT /repos/{owner}/{repo}/code-scanning/default-setup
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team wants to automate the process of enabling CodeQL on new repositories as soon as they are created. They also want to ensure that the workflow is configured with the organization's approved query pack. What is the best way to achieve this?

   • ASend an email to the security team when a new repository is created.
   • BUse the GraphQL API to subscribe to repository creation events and manually create workflows.
   • CUse a GitHub Action that runs on repository creation events and uses the REST API to create the workflow.
   • DCreate a repository template that includes the approved workflow.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key benefit of using custom tooling or scripts to audit security configurations at scale?

   • AIt guarantees that no security vulnerabilities will be introduced
   • BIt eliminates the need for GitHub Actions entirely
   • CIt provides a repeatable and consistent way to check compliance across many repositories
   • DIt automatically fixes any misconfigurations without human intervention
   Reveal Solution Discussion Select an answer first