An enterprise organization wants to enforce a custom policy that requires all repositories to enable code scanning and secret scanning, and also wants to generate a report of security alert trends across the entire enterprise. Which GitHub feature set should they use?

Enterprise security settings with custom policies, and Security Overview

Organization-level settings and Dependabot alerts

Repository-level security settings and code scanning alerts

Security Overview and secret scanning alerts

What is the primary purpose of GitHub code scanning?

To enforce branch protection rules

To detect exposed secrets in the repository

To identify vulnerabilities in code and code patterns

To monitor the health of dependencies

What advanced reporting capability is available in GitHub enterprise security?

Security Overview with organization-wide risk assessment

Secret scanning for partner patterns

A security manager wants to identify which repositories in their organization have the highest risk based on the number and severity of security alerts. They also want to see how the risk has changed over the last quarter. Which feature should they use?

Security Overview with risk assessment and trend analysis

GitHubAdvanced Security (GH-500)

Domain 1Objective 1

Understand GitHub Security Suites and Architecture GH-500 Practice Questions (Page 5)

Part of the Describe GitHub Security suites, features, and ecosystem domain, which accounts for 15-20% of the GH-500 exam.

35questions here

7free pages

10concepts

15-20%of the exam

10 Concepts in This Objective

GitHub Security suite structure
Navigation of security features
Code Security features
Secret Protection features
Supply Chain Security features
Contrasting security suites
Public repository security features
Enterprise security features
Security Overview features
Benefits of Security Overview

Questions 21–25

21application · medium
An enterprise organization wants to enforce a custom policy that requires all repositories to enable code scanning and secret scanning, and also wants to generate a report of security alert trends across the entire enterprise. Which GitHub feature set should they use?
Select an answer first
22foundation · easy
What is the primary purpose of GitHub code scanning?
Select an answer first
23foundation · easy
What advanced reporting capability is available in GitHub enterprise security?
Select an answer first
24application · medium
A security manager wants to identify which repositories in their organization have the highest risk based on the number and severity of security alerts. They also want to see how the risk has changed over the last quarter. Which feature should they use?
Select an answer first
25foundation · easy
Which GitHub feature helps developers understand the security impact of dependency changes in a pull request?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GH-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GitHub. “GH-500” is a trademark of its owner, used for identification only.