Contact Us
FAQ's
Login / Register

Home
FORUM
All Vendors
Guarantee
Testimonials
Cart (0)

Microsoft GitHub Advanced Security - GH-500 Exam Practice Test

Page: 1 / 13
Total 125 questions

Please signup / login to view this exam, then you will be able to view the entire exam for free.

Get Full Access Now

Question 1

You have enabled Dependabot alerts on your repository. If Dependabot detects a vulnerable dependency, it sends an alert when:

A. a contributor makes a change to a function in the code. B. manifests and lock files are out of date and a version needs to be updated. C. the vulnerability is removed from the GitHub Advisory Database. D. a contributor adds the vulnerable dependency to a manifest in the repository.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Which of the following formats are used to describe a code scanning alert from CodeQL?

A. Common Vulnerabilities and Exposures (CVE) B. GitHub Security Advisory (GHSA) C. Common Weakness Enumeration (CWE) D. Vulnerability Exploitability eXchange (VEX)

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Where can a user change a repository's code scanning severity threshold that fails a pull request status check?

A. Settings tab B. Security tab C. Pull Requests tab D. Actions tab

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

As a developer with write access, you navigate to a code scanning alert in your repository. When will GitHub close this alert?

A. after you fix the code by committing within the pull request B. after you find the code and click the alert within the pull request C. after you triage the pull request containing the alert D. when you use data-flow analysis to find potential security issues in code

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

A secret scanning alert should be closed as "used in tests" when a secret is:

A. in the readme.md file. B. in a test file. C. solely used for tests. D. not a secret in the production environment.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

By default, which roles can enable Dependabot alerts?

A. repository maintainers B. repository administrators C. outside collaborators D. security analysts

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Which security feature shows a vulnerable dependency in a pull request?

A. dependency review B. Dependabot alert C. the repository's Security tab D. dependency graph

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Which Dependabot configuration fields are required? Each answer presents part of the solution.
(Choose three.)

A. milestone B. schedule.interval C. allow D. directory E. package-ecosystem

Discussion 0

Correct Answer: B,D,E Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

Which CodeQL query suite provides queries of lower severity than the default query suite?

A. github/codeql/cpp/ql/src@main B. security-extended C. github/codeql-go/ql/src@main

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

What is the difference between scheduled versus triggered events in code scanning?

A. Triggered events run less frequently than scheduled events. B. Scheduled events run based on a specified schedule and triggered events run on code events such as a push. C. Scheduled events can only be set up by administrators. D. Scheduled events are more difficult to configure than triggered events.

Discussion 0

Correct Answer: B Vote an answer

Page: 1 / 13
Total 125 questions

Unlock all GH-500 features

No captcha needed
365 Days Free Updates
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Two Modes For GH-500 Practice
Customer Support

Get Full Access Now

Get in Touch

PassTestking

Our Exam Dumps will provide you with the free demo before you purchase. Our Practice Questions can help you improve your professional ability. Our Study Material provide you with excellent prepare materials for you to pass the exam and get the certification.

Latest Practice Tests

AAISM Practice Test
NSE6_FSM_AN-7.4 Practice Test
AZ-104 Practice Test
SPLK-1003 Practice Test
XDR-Engineer Practice Test
NetSec-Pro Practice Test

Useful Links

All Products
FAQs
Privacy Policy
Guarantee & Refund Policy
Terms & Conditions
How to buy?
About Us

Contact Us

Our Working Time: ( GMT 0:00-15:00 )
From Monday to Saturday

Support: Contact now

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Copyright © 2026 PASSTESTKING.COM. All rights reserved. All trademarks are the property of their respective owners and we don't provide actual questions from any vendor.