Prioritize and Manage Security Work at Scale GH-500 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of bulk alert management in GitHub Advanced Security?

   • ATo delete all alerts from the system
   • BTo apply the same action to multiple alerts at once, such as triaging or closing them
   • CTo create a new alert for each repository
   • DTo automatically fix all alerts without user input
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which scenario is appropriate for automated alert dismissal?

   • ADismissing alerts that are known false positives, such as a test file that triggers a secret-scanning rule
   • BDismissing alerts from a specific repository only if they are critical
   • CDismissing all alerts without any criteria to clear the queue
   • DDismissing alerts only after they are fixed
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which scenario best exemplifies a campaign-based remediation approach?

   • AA security team dismisses all alerts without review to save time
   • BA security team identifies all alerts related to a specific library version and plans a coordinated update across multiple repositories
   • CA developer creates a new alert for each vulnerability found
   • DA developer fixes a single vulnerability in one repository
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   You have 500 secret-scanning alerts. 400 are confirmed false positives, and 100 are real secrets. You need to dismiss the false positives and assign the real ones to the appropriate teams. You also want to ensure that the dismissal rationale is documented for future reference. What should you do?

   • AAssign all alerts to a single team and let them sort out the false positives.
   • BDismiss all 500 alerts and then reopen the 100 real secrets.
   • CCreate an automated dismissal rule for the false positives and manually assign the real secrets.
   • DUse bulk actions to dismiss the 400 false positives with a comment referencing a documented policy, then bulk-assign the 100 real secrets to the relevant teams.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   You have 50 alerts that are all the same type and have been confirmed as false positives. You want to remove them from the queue efficiently and leave a note for the team. What should you do?

   • ACreate a rule to automatically dismiss this alert type in the future.
   • BDismiss each alert individually with a comment.
   • CClose the alerts without a comment to save time.
   • DSelect all 50 alerts and dismiss them in bulk with a comment explaining why they are false positives.
   Reveal Solution Discussion Select an answer first