Prevent Secret Exposure GH-500 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When a developer's push is blocked by Push Protection, what feedback do they receive?

   • AA message in the terminal that identifies the secret type and the file and line where it was found
   • BA link to the GitHub documentation on secret scanning
   • CAn email notification with instructions on how to remove the secret
   • DA generic error message that says the push failed
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   Your organization wants to ensure that secrets are not committed to a repository. You enable secret scanning and want to block secrets at the source. What is the primary benefit of Push Protection over secret scanning alone?

   • AIt provides a detailed report of all secrets in the organization.
   • BIt alerts on secrets that are already in the repository.
   • CIt automatically rotates secrets that are detected.
   • DIt prevents secrets from being pushed to the repository in the first place.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What happens when a user bypasses Push Protection to allow a secret to be pushed?

   • AThe repository is temporarily locked for other users
   • BThe secret is automatically rotated after the push
   • CThe action is logged in the audit log for security review
   • DThe secret is encrypted in the repository
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How do validity checks increase confidence in secret scanning alerts?

   • ABy automatically notifying the secret's owner
   • BBy confirming that the secret is real and active, reducing false positives
   • CBy removing the secret from the repository
   • DBy encrypting the secret to prevent unauthorized use
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does Push Protection enforce its policy when a developer attempts to push a commit containing a secret?

   • AIt sends an email alert to the repository administrator but allows the push to proceed
   • BIt quarantines the secret in a separate branch and continues with the push
   • CIt rejects the push and prevents the secret-containing commit from being uploaded
   • DIt automatically rewrites the commit to remove the secret and then allows the push
   Reveal Solution Discussion Select an answer first