A developer at Proseware wants to enable secret scanning push protection on a single repository. The repository is part of an organization where secret scanning is enabled but push protection is not. What must the developer do?

Ask the organization owner to enable push protection at the organization level.

Enable push protection via the repository's branch protection rules.

Enable push protection in the repository's Security tab under 'Secret scanning'.

Create a custom GitHub Action to scan for secrets on push.

Which GitHub Advanced Security feature is available on GitHub Enterprise Cloud for private repositories?

Secret scanning for user-owned repositories

Contoso is running GitHub Enterprise Server (GHES) 3.9 and wants to enable secret scanning for their repositories. They notice that the 'Push protection' option is not available in the UI. What is the most likely reason?

Push protection must be enabled via the enterprise settings, not the repository settings.

Push protection requires a GHEC license, not a GHES license.

Push protection was introduced in GHES 3.10 or later.

Secret scanning is not available on GHES 3.9.

A repository administrator wants to enable GitHub Advanced Security on a specific repository. Where in the repository settings can they do this?

Under 'Code security and analysis'

A security admin at Northwind is planning to enable dependency review on GHEC. They want to ensure that pull requests with vulnerable dependencies are blocked from merging. Which feature must be enabled in addition to dependency review to achieve this?

Required status checks with a dependency review action

GitHubAdvanced Security (GH-500)

Domain 6Objective 1

Roll Out and Manage Security Features at Scale GH-500 Practice Questions (Page 2)

Part of the GitHub Security suites administration domain, which accounts for 10-15% of the GH-500 exam.

13questions here

3free pages

6concepts

10-15%of the exam

Questions 6–10

6application · easy
A developer at Proseware wants to enable secret scanning push protection on a single repository. The repository is part of an organization where secret scanning is enabled but push protection is not. What must the developer do?
Select an answer first
7foundation · easy
Which GitHub Advanced Security feature is available on GitHub Enterprise Cloud for private repositories?
Select an answer first
8application · medium
Contoso is running GitHub Enterprise Server (GHES) 3.9 and wants to enable secret scanning for their repositories. They notice that the 'Push protection' option is not available in the UI. What is the most likely reason?
Select an answer first
9foundation · easy
A repository administrator wants to enable GitHub Advanced Security on a specific repository. Where in the repository settings can they do this?
Select an answer first
10application · medium
A security admin at Northwind is planning to enable dependency review on GHEC. They want to ensure that pull requests with vulnerable dependencies are blocked from merging. Which feature must be enabled in addition to dependency review to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.