What is a limitation of secret scanning for public repositories?

It only detects secrets for a limited set of partner patterns

It cannot detect secrets in code

A security team wants to prevent developers from accidentally committing AWS access keys to a private repository. They want to block the push at the source. Which feature should they enable?

Code scanning with custom rules

Secret scanning with push protection

A maintainer of a popular public repository wants to enable push protection for secrets. However, some contributors are complaining that their pushes are being blocked for false positives. The maintainer wants to reduce the number of false positives while still preventing real secrets from being committed. What should they do?

Enable code scanning to detect secrets instead

Disable push protection and rely on secret scanning alerts

Ask contributors to use a different Git client

Allow specific patterns to bypass push protection

What is the primary function of the Security Overview dashboard in GitHub?

To provide a summary of security alerts and risks across an organization

To scan code for vulnerabilities

GitHubAdvanced Security (GH-500)

Domain 1Objective 1

Understand GitHub Security Suites and Architecture GH-500 Practice Questions (Page 4)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

35questions here

7free pages

10concepts

15-20%of the exam

10 Concepts in This Objective

GitHub Security suite structure
Navigation of security features
Code Security features
Secret Protection features
Supply Chain Security features
Contrasting security suites
Public repository security features
Enterprise security features
Security Overview features
Benefits of Security Overview

Questions 16–20

16foundation · easy
What is a limitation of secret scanning for public repositories?
Select an answer first
17application · medium
A security team wants to prevent developers from accidentally committing AWS access keys to a private repository. They want to block the push at the source. Which feature should they enable?
Select an answer first
18foundation · easy
In the repository's Security tab, which sub-tab would a user select to view alerts for exposed credentials?
Select an answer first
19expert · hard
A maintainer of a popular public repository wants to enable push protection for secrets. However, some contributors are complaining that their pushes are being blocked for false positives. The maintainer wants to reduce the number of false positives while still preventing real secrets from being committed. What should they do?
Select an answer first
20foundation · easy
What is the primary function of the Security Overview dashboard in GitHub?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.

Understand GitHub Security Suites and Architecture GH-500 Practice Questions (Page 4)

Questions 16–20

What is a limitation of secret scanning for public repositories?

A security team wants to prevent developers from accidentally committing AWS access keys to a private repository. They want to block the push at the source. Which feature should they enable?

In the repository's Security tab, which sub-tab would a user select to view alerts for exposed credentials?

What is the primary function of the Security Overview dashboard in GitHub?

Keep studying — Describe GitHub Security suites, features, and ecosystem