Secure Dependencies During Development GH-500 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which HTTP method is used to retrieve dependency review results from the GitHub API?

   • APUT
   • BDELETE
   • CGET
   • DPOST
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is required to enable Dependency Review on a repository?

   • AThe repository must be migrated to GitHub Enterprise Cloud
   • BThe repository must use a supported package manager and have a dependency manifest or lockfile
   • CThe repository must have branch protection rules enabled
   • DThe repository must be public and have at least 100 stars
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which Dependabot configuration option controls how often updates are checked?

   • Atimezone
   • Binterval
   • Cfrequency
   • Dschedule
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How can you configure Dependency Review to fail a pull request when a vulnerability is detected?

   • ABy setting the 'fail-on-severity' option to a severity level such as 'high' in the configuration file
   • BBy adding a comment to the pull request with the text '/fail-on-vulnerability'
   • CBy setting the repository's default branch to 'main'
   • DBy enabling the 'require dependency review' branch protection rule
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does Dependency Review integrate with pull requests once enabled?

   • AIt sends an email to the repository owner for every pull request that modifies a dependency
   • BIt adds a check that appears in the pull request's checks section, with details on dependency changes
   • CIt creates a new branch for each dependency update
   • DIt automatically merges pull requests that do not introduce new vulnerabilities
   Reveal Solution Discussion Select an answer first