Free GitHub GitHub-Advanced-Security Exam Questions

Question 1

What is a common challenge when interpreting CodeQL results?

A : Distinguishing between false positives and actual issues

B : All of the above

C : Determining the impact of detected vulnerabilities

D : Understanding the technical jargon

Answer: B

Question 2

Assuming that notification settings and Dependabot alert recipients have not been customized,which user account setting should you use to get an alert when a vulnerability is detected in one ofyour repositories?

A : Enable all in existing repositories

B : Enable by default for new public repositories

C : Enable all for Dependabot alerts

D : Enable all for Dependency graph

Answer: C

Question 3

How does secret scanning in GitHub enhance overall project security?

A : By automating code reviews

B : By enforcing coding standards

C : By managing team access controls

D : By detecting and alerting on exposed secrets

Answer: D

Question 4

Assuming that notification settings and Dependabot alert recipients have not been customized,which user account setting should you use to get an alert when a vulnerability is detected in one ofyour repositories?

A : Enable all in existing repositories

B : Enable by default for new public repositories

C : Enable all for Dependabot alerts

D : Enable all for Dependency graph

Answer: C

Question 5

What type of security issues can CodeQL identify?

A : Syntax errors

B : SQL injection

C : Cross-site scripting

D : Memory leaks

E : Buffer overflows

F : Data race conditions

Answer: B,C,E