Online Access Free GH-500 Practice Test

What should you do after receiving an alert about a dependency added in a pull request?

• A.Deploy the code to your default branch
• B.Disable Dependabot alerts for all repositories owned by your organization
• C.Update the vulnerable dependencies before the branch is merged
• D.Fork the branch and deploy the new fork

Where can you find the vulnerable dependencies that GitHub detected in your repository?

• A.In code scanning alerts
• B.In secret scanning alerts
• C.In security advisories
• D.In Dependabot alerts

How would you build your code within the CodeQL analysis workflow? (Each answer presents a complete solution. Choose two.)

• A.Use CodeQL's autobuild action.
• B.Use CodeQL's init action.
• C.Use jobs.analyze.runs-on.
• D.Ignore paths.
• E.Upload compiled binaries.
• F.Implement custom build steps.

Which alerts do you see in the repository's Security tab? (Each answer presents part of the solution. Choose three.)

• A.Repository permissions
• B.Dependabot alerts
• C.Secret scanning alerts
• D.Security status alerts
• E.Code scanning alerts

Who can fix a code scanning alert on a private repository?

• A.Users who have Read permissions within the repository
• B.Users who have Write access to the repository
• C.Users who have the Triage role within the repository
• D.Users who have the security manager role within the repository