Which GitHub Advanced Security feature is available on GitHub Enterprise Cloud but not on GitHub Enterprise Server?

Secret scanning for user-owned repositories

Secret scanning for private repositories

A developer at Litware wants to enable code scanning on a new repository hosted on GHEC. The repository contains a Java application built with Maven. The developer wants to use the default CodeQL analysis without creating a custom workflow. What must the developer do to enable code scanning?

Create a new workflow file in the .github/workflows directory and manually write the CodeQL analysis steps.

Navigate to the repository's Security tab, click 'Set up code scanning', and choose 'Default' to commit the CodeQL workflow.

Enable code scanning from the organization settings, which automatically applies to all repositories.

Install the CodeQL CLI locally and run it manually, then upload the results to the repository.

When comparing GitHub Enterprise Cloud and GitHub Enterprise Server, which statement about GitHub Advanced Security feature availability is accurate?

All GitHub Advanced Security features are available on both GHEC and GHES at the same time

GitHub Enterprise Cloud has some GitHub Advanced Security features that are not available on GitHub Enterprise Server

GitHub Enterprise Server does not support any GitHub Advanced Security features

GitHub Enterprise Server has more GitHub Advanced Security features than GitHub Enterprise Cloud

As a GitHub organization owner, you need to enable GitHub Advanced Security (GHAS) for the organization so that security features apply to member repositories. Which action correctly enables GHAS at the organization level?

Navigate to the organization's Settings → Code security and analysis, and click Enable for GitHub Advanced Security.

Add the 'security manager' role to a team and assign that team to the organization.

Use the REST API to set the organization's default security configuration to 'enabled' for all current and future repositories.

Navigate to each repository's Settings → Code security and analysis, and enable GitHub Advanced Security individually.

GitHubAdvanced Security (GH-500)

Domain 6Objective 1

Roll Out and Manage Security Features at Scale GH-500 Practice Questions (Page 1)

Part of the GitHub Security suites administration domain, which accounts for 10-15% of the GH-500 exam.

13questions here

3free pages

6concepts

10-15%of the exam

Questions 1–5

1foundation · easy
Which GitHub Advanced Security feature is available on GitHub Enterprise Cloud but not on GitHub Enterprise Server?
Select an answer first
2application · easy
A developer at Litware wants to enable code scanning on a new repository hosted on GHEC. The repository contains a Java application built with Maven. The developer wants to use the default CodeQL analysis without creating a custom workflow. What must the developer do to enable code scanning?
Select an answer first
3foundation · easy
Which GitHub Advanced Security feature is available on GitHub Enterprise Server 3.0 and later?
Select an answer first
4foundation · easy
When comparing GitHub Enterprise Cloud and GitHub Enterprise Server, which statement about GitHub Advanced Security feature availability is accurate?
Select an answer first
5foundation · medium
As a GitHub organization owner, you need to enable GitHub Advanced Security (GHAS) for the organization so that security features apply to member repositories. Which action correctly enables GHAS at the organization level?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.