Online Access Free GH-100 Practice Test

Which GitHub feature is responsible for tracking dependencies and known vulnerabilities in those dependencies from an advisory database?

• A.Security Policy
• B.CodeQL
• C.Dependency Graph
• D.Repository Insights

Which of the following is a key benefit of using GitHub Marketplace Apps in an enterprise?

• A.Apps eliminate the need for GitHub Actions entirely
• B.They guarantee no downtime during enterprise GitHub maintenance windows
• C.All apps come pre-approved by GitHub's internal security team
• D.They often include integrations with external services, reducing the need for custom code

Our organization is updating its enterprise policies. Which of the following steps should you take to ensure alignment with security requirements?

• A.Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits
• B.Regularly assess and adjust policies based on evolving risks.
• C.Implement changes without consulting stakeholders.
• D.Maintain clear documentation of existing policies and policy changes.

What is the effect of enforcing a policy that restricts GitHub Actions to only those created by the enterprise?

• A.Actions can only be triggered by organization members
• B.All public actions are allowed
• C.Only actions created within the enterprise are allowed
• D.Marketplace actions are allowed only with SSO enabled

What is the first step when sensitive data is accidentally pushed to a public GitHub repository?

• A.Force push a commit removing the data
• B.Open an issue to inform users
• C.Revoke any exposed credentials immediately
• D.Delete the repository