Prioritize and Manage Security Work at Scale GH-500 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a severity and remediation ruleset in GitHub Advanced Security?

   • ATo assign severity levels and remediation actions to security alerts based on defined criteria
   • BTo automatically fix code vulnerabilities without developer intervention
   • CTo replace the need for manual security review entirely
   • DTo block all code changes until security alerts are resolved
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A new dependency vulnerability affects 150 repositories in your organization. You need to remediate it efficiently, track progress, and document the effort for auditors. What should you do?

   • AOpen individual issues in each repository and assign them to the repository maintainers.
   • BCreate a remediation campaign that groups the affected repositories, assigns owners, and tracks the status of each fix.
   • CUse a script to automatically update the dependency in all repositories at once.
   • DSend an email to all repository maintainers asking them to update the dependency.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which action is an example of bulk alert management?

   • ASelecting 20 alerts and assigning them to a specific team member
   • BCreating a new security policy for the organization
   • CReviewing each alert one by one and deciding its severity
   • DRunning a code scan on a repository
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   You are setting up an automated rule to dismiss alerts for a known false-positive pattern. You want to ensure that the rule is transparent and can be reviewed by other team members. What should you do?

   • AUse a generic description that doesn't mention the specific pattern.
   • BDocument the rule's purpose and criteria in the rule description and link to a detailed policy document.
   • CCreate the rule without any description to avoid clutter.
   • DKeep the rule's details private so only the security team knows about it.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   You have 1000 alerts. 800 are false positives that follow a known pattern, and 200 are real. You need to handle them efficiently, but you also want to ensure that the false positives are documented and the real ones are assigned to the right teams. What should you do?

   • AManually dismiss the 800 false positives and then assign the 200 real alerts.
   • BCreate an automated dismissal rule for the known false-positive pattern, then bulk-assign the remaining 200 real alerts to the appropriate teams.
   • CDismiss all 1000 alerts and then reopen the 200 real ones.
   • DAssign all alerts to a single team and let them sort out the false positives.
   Reveal Solution Discussion Select an answer first