Optimize and Automate Code Security Operations GH-500 Practice Questions (Page 3)

Questions 11–12

1. 11application · medium

   A large C# solution takes over an hour to scan with CodeQL. The team wants to reduce the scan time by splitting the analysis across multiple jobs. What is the recommended approach?

   • AUse a matrix strategy to run separate jobs for each project in the solution.
   • BUse the `build-mode` input to speed up the build.
   • CIncrease the `threads` input to use more CPU cores.
   • DReduce the number of queries to speed up the scan.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team wants to automate CodeQL scans for all repositories in their organization. They want to ensure that scans run on a schedule and on pull requests, but they also want to avoid running scans on forks. What is the best way to achieve this?

   • AUse the `schedule` trigger only and rely on the default branch protection rules.
   • BUse a workflow template that includes the `pull_request` trigger and a condition to skip forks.
   • CUse the `workflow_dispatch` trigger and manually run scans on pull requests.
   • DUse the `push` trigger and rely on the `paths` filter to limit scans.
   Reveal Solution Discussion Select an answer first