A team wants to enable code scanning on a repository that uses a compiled language (C++). They are unsure if the default autobuild will work. What should they do?

Use the default workflow and rely on autobuild; if it fails, manually configure the build steps.

Disable autobuild and always provide manual build commands.

Use a different code scanning tool that does not require a build.

Enable code scanning only for interpreted languages.

A team has a repository with a complex build that requires a specific environment variable to be set before the build. They are using the default CodeQL workflow. How should they incorporate this requirement?

Use a custom action that sets the variable and runs the build.

Set the environment variable in the workflow-level 'env' block.

Add an 'env' block to the 'autobuild' step to set the variable.

Replace the 'autobuild' step with a manual build step that sets the environment variable.

GitHubAdvanced Security (GH-500)

Domain 4Objective 2

Set up and Configure Code Security GH-500 Practice Questions (Page 5)

Part of the Configure and use Code Security (formerly Code Scanning with CodeQL) domain, which accounts for 10-15% of the GH-500 exam.

24questions here

5free pages

6concepts

10-15%of the exam

Questions 21–24

21foundation · easy
Which file format is used by the default CodeQL workflow to define the code scanning configuration?
Select an answer first
22foundation · easy
Which GitHub Actions trigger would run a code scanning workflow when a pull request is opened?
Select an answer first
23application · medium
A team wants to enable code scanning on a repository that uses a compiled language (C++). They are unsure if the default autobuild will work. What should they do?
Select an answer first
24expert · hard
A team has a repository with a complex build that requires a specific environment variable to be set before the build. They are using the default CodeQL workflow. How should they incorporate this requirement?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.

Set up and Configure Code Security GH-500 Practice Questions (Page 5)

Questions 21–24

Which file format is used by the default CodeQL workflow to define the code scanning configuration?

Which GitHub Actions trigger would run a code scanning workflow when a pull request is opened?

A team wants to enable code scanning on a repository that uses a compiled language (C++). They are unsure if the default autobuild will work. What should they do?

A team has a repository with a complex build that requires a specific environment variable to be set before the build. They are using the default CodeQL workflow. How should they incorporate this requirement?

Keep studying — Configure and use Code Security (formerly Code Scanning with CodeQL)