What is the purpose of using a matrix build in a code scanning workflow?

To reduce the total number of jobs in the workflow.

To store the analysis results in a matrix format.

To combine all languages into a single analysis job.

To run the analysis across multiple operating systems and language versions.

In a CodeQL workflow, what does the `language` matrix typically specify?

The operating systems to run the analysis on.

The programming languages to analyze.

The build mode for the analysis.

What is the primary method to enable code scanning for a repository using GitHub Actions?

Install the CodeQL CLI locally and run it manually on every commit.

Enable the 'Dependabot alerts' setting in the repository's security tab.

Create a repository rule set that requires code scanning results.

Add a CodeQL workflow file to the repository's .github/workflows directory.

How can a team using an external CI system (e.g., Jenkins) enable code scanning on GitHub?

Upload SARIF results to GitHub using the code scanning API or the upload-sarif action.

Install the CodeQL extension in the external CI system and sync it with GitHub.

Configure GitHub to automatically scan the external CI system's logs.

Create a GitHub Action that runs the external CI system's build.

GitHubAdvanced Security (GH-500)

Domain 4Objective 2

Set up and Configure Code Security GH-500 Practice Questions (Page 3)

Part of the Configure and use Code Security (formerly Code Scanning with CodeQL) domain, which accounts for 10-15% of the GH-500 exam.

24questions here

5free pages

6concepts

10-15%of the exam

Questions 11–15

11foundation · easy
What is the purpose of using a matrix build in a code scanning workflow?
Select an answer first
12foundation · easy
Which setting in a CodeQL workflow controls whether the analysis uses a compiled or interpreted approach?
Select an answer first
13foundation · easy
In a CodeQL workflow, what does the `language` matrix typically specify?
Select an answer first
14foundation · easy
What is the primary method to enable code scanning for a repository using GitHub Actions?
Select an answer first
15foundation · easy
How can a team using an external CI system (e.g., Jenkins) enable code scanning on GitHub?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.