GitHub GitHub-Advanced-Security Quiz 1 Topic 1 Questions 1-5

Question: 1

-- [Use Code Scanning with CodeQL]

Which of the following options are code scanning application programming interface (API) endpoints? (Each answer presents part of the solution. Choose two.)

AList all open code scanning alerts for the default branch

BModify the severity of an open code scanning alert

CGet a single code scanning alert

DDelete all open code scanning alerts

Show Answer

Question: 2

-- [Configure and Use Secret Scanning]

Which of the following statements best describes secret scanning push protection?

ACommits that contain secrets are blocked before code is added to the repository.

BSecret scanning alerts must be closed before a branch can be merged into the repository.

CButtons for sensitive actions in the GitHub UI are disabled.

DUsers need to reply to a 2FA challenge before any push events.

Show Answer

Question: 3

-- [Configure and Use Secret Scanning]

Which of the following secret scanning features can verify whether a secret is still active?

APush protection

BValidity checks

CBranch protection

DCustom patterns

Show Answer

Question: 4

-- [Use Code Scanning with CodeQL]

What does a CodeQL database of your repository contain?

AA build for Go projects to set up the project

BA build of the code and extracted data

CBuild commands for C/C++, C#, and Java

DA representation of all of the source code
GitHub
Agentic AI for AppSec Teams

Show Answer

Question: 5

-- [Configure and Use Secret Scanning]

Which details do you have to provide to create a custom pattern for secret scanning? (Each answer presents part of the solution. Choose two.)

AThe secret format

BThe name of the pattern

CA list of repositories to scan

DAdditional match requirements for the secret format

Show Answer

GitHub GitHub-Advanced-Security Quiz:1 Topic:1 Questions:1-5