Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

GitHub Advanced Security GHAS Exam Question and Answers

GitHub Advanced Security GHAS Exam

Last Update Jun 15, 2025
Total Questions : 75

We are offering FREE GitHub-Advanced-Security GitHub exam questions. All you do is to just go and sign up. Give your details, prepare GitHub-Advanced-Security free exam questions and then go for complete pool of GitHub Advanced Security GHAS Exam test questions that will help you more.

GitHub-Advanced-Security pdf

GitHub-Advanced-Security PDF

$36.75  $104.99
 Add to Cart
GitHub-Advanced-Security Engine

GitHub-Advanced-Security Testing Engine

$43.75  $124.99
 Add to Cart
GitHub-Advanced-Security PDF + Engine

GitHub-Advanced-Security PDF + Testing Engine

$57.75  $164.99
 Add to Cart
Questions 1

Which of the following secret scanning features can verify whether a secret is still active?

Options:

A.  

Push protection

B.  

Validity checks

C.  

Branch protection

D.  

Custom patterns

Discussion 0
Questions 2

Which key is required in the update settings of the Dependabot configuration file?

Options:

A.  

rebase-strategy

B.  

commit-message

C.  

assignees

D.  

package-ecosystem

Discussion 0
Questions 3

Which of the following statements most accurately describes push protection for secret scanning custom patterns?​

Options:

A.  

Push protection must be enabled for all, or none, of a repository's custom patterns.

B.  

Push protection is an opt-in experience for each custom pattern.

C.  

Push protection is not available for custom patterns.

D.  

Push protection is enabled by default for new custom patterns.​

Discussion 0
Questions 4

A dependency has a known vulnerability. What does the warning message include?

Options:

A.  

The security impact of these changes

B.  

An easily understandable visualization of dependency change

C.  

How many projects use these components

D.  

A brief description of the vulnerability

Discussion 0
Questions 5

Which of the following options would close a Dependabot alert?

Options:

A.  

Creating a pull request to resolve the vulnerability that will be approved and merged

B.  

Viewing the Dependabot alert on the Dependabot alerts tab of your repository

C.  

Viewing the dependency graph

D.  

Leaving the repository in its current state

Discussion 0
Questions 6

Which of the following steps should you follow to integrate CodeQL into a third-party continuous integration system? (Each answer presents part of the solution. Choose three.)

Options:

A.  

Process alerts

B.  

Analyze code

C.  

Upload scan results

D.  

Install the CLI

E.  

Write queries

Discussion 0
Questions 7

Which of the following is the best way to prevent developers from adding secrets to the repository?

Options:

A.  

Create a CODEOWNERS file

B.  

Make the repository public

C.  

Configure a security manager

D.  

Enable push protection

Discussion 0
Questions 8

When secret scanning detects a set of credentials on a public repository, what does GitHub do?

Options:

A.  

It notifies the service provider who issued the secret.

B.  

It displays a public alert in the Security tab of the repository.

C.  

It scans the contents of the commits for additional secrets.

D.  

It sends a notification to repository members.

Discussion 0
Questions 9

What do you need to do before you can define a custom pattern for a repository?​

Options:

A.  

Provide a regular expression for the format of your secret pattern.

B.  

Add a secret scanning custom pattern.

C.  

Enable secret scanning on the repository.

D.  

Provide match requirements for the secret format.​

Stack Overflow

Discussion 0
Questions 10

What is required to trigger code scanning on a specified branch?

Options:

A.  

The repository must be private.

B.  

Secret scanning must be enabled on the repository.

C.  

Developers must actively maintain the repository.

D.  

The workflow file must exist in that branch.

Discussion 0
Questions 11

As a repository owner, you do not want to run a GitHub Actions workflow when changes are made to any .txt or markdown files. How would you adjust the event trigger for a pull request that targets the main branch? (Each answer presents part of the solution. Choose three.)

    on:

    pull_request:

    branches: [main]

Options:

A.  

- '/*.md'

B.  

- '/*.txt'

C.  

paths:

D.  

paths-ignore:

E.  

- 'docs/*.md'

Discussion 0
Questions 12

A repository's dependency graph includes:

Options:

A.  

Dependencies parsed from a repository's manifest and lock files.

B.  

Annotated code scanning alerts from your repository's dependencies.

C.  

A summary of the dependencies used in your organization's repositories.

D.  

Dependencies from all your repositories.

Discussion 0
Questions 13

Who can fix a code scanning alert on a private repository?​

Options:

A.  

Users who have the Triage role within the repository

B.  

Users who have Read permissions within the repository

C.  

Users who have Write access to the repository

D.  

Users who have the security manager role within the repository​

Discussion 0
Questions 14

Where can you use CodeQL analysis for code scanning? (Each answer presents part of the solution. Choose two.)

Options:

A.  

In a third-party Git repository

B.  

In a workflow

C.  

In an external continuous integration (CI) system

D.  

In the Files changed tab of the pull request

Discussion 0
Questions 15

What kind of repository permissions do you need to request a Common Vulnerabilities and Exposures (CVE) identification number for a security advisory?​

Options:

A.  

Maintain

B.  

Admin

C.  

Triage

D.  

Write​

Discussion 0
Questions 16

What are Dependabot security updates?

Options:

A.  

Automated pull requests that help you update dependencies that have known vulnerabilities

B.  

Automated pull requests that keep your dependencies updated, even when they don’t have any vulnerabilities

C.  

Automated pull requests to update the manifest to the latest version of the dependency

D.  

Compatibility scores to let you know whether updating a dependency could cause breaking changes to your project

Discussion 0
Questions 17

Assuming there is no custom Dependabot behavior configured, where possible, what does Dependabot do after sending an alert about a vulnerable dependency in a repository?

Options:

A.  

Creates a pull request to upgrade the vulnerable dependency to the minimum possible secure version

B.  

Scans repositories for vulnerable dependencies on a schedule and adds those files to a manifest

C.  

Constructs a graph of all the repository's dependencies and public dependents for the default branch

D.  

Scans any push to all branches and generates an alert for each vulnerable repository

Discussion 0
Questions 18

Which CodeQL query suite provides queries of lower severity than the default query suite?

Options:

A.  

github/codeql-go/ql/src@main

B.  

github/codeql/cpp/ql/src@main

C.  

security-extended

Discussion 0
Questions 19

What should you do after receiving an alert about a dependency added in a pull request?

Options:

A.  

Disable Dependabot alerts for all repositories owned by your organization

B.  

Fork the branch and deploy the new fork

C.  

Update the vulnerable dependencies before the branch is merged

D.  

Deploy the code to your default branch

Discussion 0
Questions 20

Which details do you have to provide to create a custom pattern for secret scanning? (Each answer presents part of the solution. Choose two.)

Options:

A.  

The secret format

B.  

The name of the pattern

C.  

A list of repositories to scan

D.  

Additional match requirements for the secret format

Discussion 0
Questions 21

What role is required to change a repository's code scanning severity threshold that fails a pull request status check?

Options:

A.  

Maintain

B.  

Write

C.  

Triage

D.  

Admin

Discussion 0
Questions 22

As a contributor, you discovered a vulnerability in a repository. Where should you look for the instructions on how to report the vulnerability?

Options:

A.  

support.md

B.  

readme.md

C.  

contributing.md

D.  

security.md

Discussion 0