Microsoft GitHub Advanced Security - GH-500 Free Exam Questions

A. The organization's Settings tab

B. The repository's Settings tab

C. The organization's Repository permissions

D. The enterprise's Settings tab

A. A list of repositories to scan

B. The secret format

C. Additional match requirements for the secret format

D. The name of the pattern

A. The security impact of these changes

B. A brief description of the vulnerability

C. How many projects use these components

D. An easily understandable visualization of dependency change

A. Private repositories where GitHub Advanced Security is also enabled

B. All repositories

C. Related features for public repositories

D. Only private repositories

A. Compile the source code.

B. Remove the autobuild step from your code scanning workflow and add specific build steps.

C. Use CodeQL, which implicitly detects the supported languages in your code base.

D. Remove specific build steps.

A. All new repositories within your organization

B. Private repositories

C. Public repositories

D. User-owned private repositories

A. Never allow

B. No policy

C. Allow for all organizations

D. Allow for selected organizations

A. A form matching the MITRE database security advisory format

B. A form matching the Common Vulnerabilities and Exposures (CVE) description format

C. A Dependabot alert sent to the affected repositories

D. A CVE Numbering Authority (CNA) description format

A. Read-only access to the dependency manifest and lock files for a repository

B. Read-only access to all the repository's files

C. Write access to the dependency manifest and lock files for an enterprise

D. Dependency graph enabled at the organization level for all new private repositories